Overview

overview

10

Static

static

c5a0b20546...1d.exe

windows7-x64

10

c5a0b20546...1d.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c5a0b205463397bfd502949240acf6e8a202619afcf27c0e4b6b01490ce3621d

  • Size

    32KB

  • Sample

    221205-mwes4sca92

  • MD5

    395070dfcc5ec760f585506533db306e

  • SHA1

    42ae3ba365ac73d8f4f77899387b67c19ca5802b

  • SHA256

    c5a0b205463397bfd502949240acf6e8a202619afcf27c0e4b6b01490ce3621d

  • SHA512

    e9ee12bfa648689f8228e9f923176c91ab12d5d243362356fe4f41e1edc9a393c663263e431f242c5e86984f4891d6e8d1f436a061263b61517fd2ce13e0da61

  • SSDEEP

    768:h+ahIdmVIBW+3v6+8FEMGu15oB19mPHXRHrMWNCSGcdH8zevc:hvhIdmVIBW+f6+HMGNB19CR55+Cvc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c5a0b205463397bfd502949240acf6e8a202619afcf27c0e4b6b01490ce3621d

    • Size

      32KB

    • MD5

      395070dfcc5ec760f585506533db306e

    • SHA1

      42ae3ba365ac73d8f4f77899387b67c19ca5802b

    • SHA256

      c5a0b205463397bfd502949240acf6e8a202619afcf27c0e4b6b01490ce3621d

    • SHA512

      e9ee12bfa648689f8228e9f923176c91ab12d5d243362356fe4f41e1edc9a393c663263e431f242c5e86984f4891d6e8d1f436a061263b61517fd2ce13e0da61

    • SSDEEP

      768:h+ahIdmVIBW+3v6+8FEMGu15oB19mPHXRHrMWNCSGcdH8zevc:hvhIdmVIBW+f6+HMGNB19CR55+Cvc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks