Overview

overview

10

Static

static

7c16426062...96.exe

windows7-x64

10

7c16426062...96.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7c16426062514acd55b5da2e066219a4df400f5257237a163865c23eb4906996

  • Size

    151KB

  • Sample

    221203-zfvwlsdc97

  • MD5

    03b8fbea3ae6896391caa354ae596e40

  • SHA1

    55791c4c42e2ac2368d4fe685a73a6a96417c5e3

  • SHA256

    7c16426062514acd55b5da2e066219a4df400f5257237a163865c23eb4906996

  • SHA512

    d7ebf672bbe8f5169abb9780ee0112edc34daadb9cfe40128726a42e289775b579f9ef6b93588dee63655231699040f614865b651a34511420e88ff3ee40082d

  • SSDEEP

    3072:Lq36BhgKwuFIH5DjQePmKFTeF7kwHnGe4:LnyKw55nQETybGB

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7c16426062514acd55b5da2e066219a4df400f5257237a163865c23eb4906996

    • Size

      151KB

    • MD5

      03b8fbea3ae6896391caa354ae596e40

    • SHA1

      55791c4c42e2ac2368d4fe685a73a6a96417c5e3

    • SHA256

      7c16426062514acd55b5da2e066219a4df400f5257237a163865c23eb4906996

    • SHA512

      d7ebf672bbe8f5169abb9780ee0112edc34daadb9cfe40128726a42e289775b579f9ef6b93588dee63655231699040f614865b651a34511420e88ff3ee40082d

    • SSDEEP

      3072:Lq36BhgKwuFIH5DjQePmKFTeF7kwHnGe4:LnyKw55nQETybGB

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks