Overview

overview

10

Static

static

1

795b1f2d5c...c6.exe

windows7-x64

10

795b1f2d5c...c6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    795b1f2d5c247f993cfb86b0c7477c0dcd01ecb86d1f717907217902ae784ec6

  • Size

    1.8MB

  • Sample

    221205-v7vbyaed3v

  • MD5

    5fbf02c74221655c1e378f8cd0cec4ee

  • SHA1

    dd9f5edab6c8c9c0665a2c6e3a4090663a95d0d4

  • SHA256

    795b1f2d5c247f993cfb86b0c7477c0dcd01ecb86d1f717907217902ae784ec6

  • SHA512

    93143f1e0459af26e1cbf59e4cef96624a2fac862a0b419a04c0eceafa7515524a95e86baedae58745d46f3bff9d9a7bdbd5a2f9647bd12d440988a7f2652c15

  • SSDEEP

    49152:nymv/A9r6b7Bo6kaepTqvtchcL6yUw4gZ2oe7yUFex:nyiAN6+ZqFHL7X

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      795b1f2d5c247f993cfb86b0c7477c0dcd01ecb86d1f717907217902ae784ec6

    • Size

      1.8MB

    • MD5

      5fbf02c74221655c1e378f8cd0cec4ee

    • SHA1

      dd9f5edab6c8c9c0665a2c6e3a4090663a95d0d4

    • SHA256

      795b1f2d5c247f993cfb86b0c7477c0dcd01ecb86d1f717907217902ae784ec6

    • SHA512

      93143f1e0459af26e1cbf59e4cef96624a2fac862a0b419a04c0eceafa7515524a95e86baedae58745d46f3bff9d9a7bdbd5a2f9647bd12d440988a7f2652c15

    • SSDEEP

      49152:nymv/A9r6b7Bo6kaepTqvtchcL6yUw4gZ2oe7yUFex:nyiAN6+ZqFHL7X

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks