Overview

overview

10

Static

static

955effcb09...a8.exe

windows7-x64

10

955effcb09...a8.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    955effcb099f7df151d1652b4757ec103e2e40355e6d5dd3ee281b7522d1daa8

  • Size

    304KB

  • Sample

    221205-2zbyyshg3t

  • MD5

    0d6d96aff64bf0f6c9f03ec656eafa10

  • SHA1

    60db81a1cbaebdf7b9027204d64c35a82a65b449

  • SHA256

    955effcb099f7df151d1652b4757ec103e2e40355e6d5dd3ee281b7522d1daa8

  • SHA512

    272791aa64cd2a3ec1039b3c592d314a27a0e8ace5562dfa868c9da4b11f37d9f21bc47e5b798cd8131e00d6e8d466be20e227b38919921c66ef7bf06da397d4

  • SSDEEP

    6144:yYWc4OLsI/3+mQLgGof73UxEQrDaThaY9j+V71GSfyjSlDUNo7wI66XpzoeGDNj:yYn4OLL/a2fDUjyhAV7ASLRDqnJ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      955effcb099f7df151d1652b4757ec103e2e40355e6d5dd3ee281b7522d1daa8

    • Size

      304KB

    • MD5

      0d6d96aff64bf0f6c9f03ec656eafa10

    • SHA1

      60db81a1cbaebdf7b9027204d64c35a82a65b449

    • SHA256

      955effcb099f7df151d1652b4757ec103e2e40355e6d5dd3ee281b7522d1daa8

    • SHA512

      272791aa64cd2a3ec1039b3c592d314a27a0e8ace5562dfa868c9da4b11f37d9f21bc47e5b798cd8131e00d6e8d466be20e227b38919921c66ef7bf06da397d4

    • SSDEEP

      6144:yYWc4OLsI/3+mQLgGof73UxEQrDaThaY9j+V71GSfyjSlDUNo7wI66XpzoeGDNj:yYn4OLL/a2fDUjyhAV7ASLRDqnJ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks