Overview

overview

10

Static

static

40be297e8a...b6.exe

windows7-x64

10

40be297e8a...b6.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40be297e8a3896b2d2ce8ec150f77f4fdb7d9b3bf33a2870ab29e5396911c1b6

  • Size

    293KB

  • Sample

    221203-yp6h2aah73

  • MD5

    1d0ca469e3bf55346acb5eb833788950

  • SHA1

    44d6bcc7c1d88267697a3bae0e2f70f99726ee57

  • SHA256

    40be297e8a3896b2d2ce8ec150f77f4fdb7d9b3bf33a2870ab29e5396911c1b6

  • SHA512

    0500e6a08c0636a8befe1919cb36f90b307b9fa46753135c9ba3430e0bda1fa0191e3b1671cf06c6b104b77fe6c262a007a0f57dd741ac244d1537efdb4aa7ff

  • SSDEEP

    3072:fj5DsbrQz7kYCe9wKc8cqTnYGgvQgjjZSEvpfO9b0p/I3BbBkh4:R6Q3qL8tdQjZbhGB9

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      40be297e8a3896b2d2ce8ec150f77f4fdb7d9b3bf33a2870ab29e5396911c1b6

    • Size

      293KB

    • MD5

      1d0ca469e3bf55346acb5eb833788950

    • SHA1

      44d6bcc7c1d88267697a3bae0e2f70f99726ee57

    • SHA256

      40be297e8a3896b2d2ce8ec150f77f4fdb7d9b3bf33a2870ab29e5396911c1b6

    • SHA512

      0500e6a08c0636a8befe1919cb36f90b307b9fa46753135c9ba3430e0bda1fa0191e3b1671cf06c6b104b77fe6c262a007a0f57dd741ac244d1537efdb4aa7ff

    • SSDEEP

      3072:fj5DsbrQz7kYCe9wKc8cqTnYGgvQgjjZSEvpfO9b0p/I3BbBkh4:R6Q3qL8tdQjZbhGB9

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks