Overview

overview

8

Static

static

d99dd1463d...b2.exe

windows7-x64

8

d99dd1463d...b2.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d99dd1463d0ef280747f542b776241a643eb5b3ffdab76d2c934d52cb2f421b2

  • Size

    60KB

  • Sample

    221204-r13sysha52

  • MD5

    abd30df0982e3d96ab4ec8b12f7c3865

  • SHA1

    946d0b74588933180e7fc25f349b7e3783eefda5

  • SHA256

    d99dd1463d0ef280747f542b776241a643eb5b3ffdab76d2c934d52cb2f421b2

  • SHA512

    559624a4ce3798ad69e8f2b7dbbf0de3d704267ca031b4f4cb9dad58f54c7f1bf83194d90c02dcbf2fd85d0f9751f43fc2b812c0235e3c74f40e1a99056b24e9

  • SSDEEP

    768:MCLUxFuQXgc3aeGFf8QCfWUQneSkOo2lQpY8u07uKL74kJGDPiEKAspQBlYVhix:MCCgQXSeo0fjQebKlQlFix

Score
8/10
persistence

Malware Config

Targets

    • Target

      d99dd1463d0ef280747f542b776241a643eb5b3ffdab76d2c934d52cb2f421b2

    • Size

      60KB

    • MD5

      abd30df0982e3d96ab4ec8b12f7c3865

    • SHA1

      946d0b74588933180e7fc25f349b7e3783eefda5

    • SHA256

      d99dd1463d0ef280747f542b776241a643eb5b3ffdab76d2c934d52cb2f421b2

    • SHA512

      559624a4ce3798ad69e8f2b7dbbf0de3d704267ca031b4f4cb9dad58f54c7f1bf83194d90c02dcbf2fd85d0f9751f43fc2b812c0235e3c74f40e1a99056b24e9

    • SSDEEP

      768:MCLUxFuQXgc3aeGFf8QCfWUQneSkOo2lQpY8u07uKL74kJGDPiEKAspQBlYVhix:MCCgQXSeo0fjQebKlQlFix

    Score
    8/10
    persistence

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks