Overview

overview

10

Static

static

b587db23ae...d0.exe

windows7-x64

10

b587db23ae...d0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b587db23ae68c5106ef4f9f9af9a7b6746f9b79fd016ea91eaf53c9b8a8036d0

  • Size

    456KB

  • Sample

    221206-jxkh7scb5z

  • MD5

    8aa739b931758e1e365db4825da4f5ad

  • SHA1

    aaee2edf8138372eefbe7e29194b81a13d7b6f11

  • SHA256

    b587db23ae68c5106ef4f9f9af9a7b6746f9b79fd016ea91eaf53c9b8a8036d0

  • SHA512

    d5d259b5e3420e577f1ff9983e434b22267e7e020836d11a114159b477ace792c5e25b649a1f37a42bf3744d09d5bcbb62e3b01e2571a2c885a2c0758ab19640

  • SSDEEP

    6144:4DhMq4zPd+Nfhbm7n+D5ub9v95oingRyS4tV4Rts2t7Zfxfs287FbbxUtPl2:/zF+Nfhbm8m7nnguctdt1fF8std2

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b587db23ae68c5106ef4f9f9af9a7b6746f9b79fd016ea91eaf53c9b8a8036d0

    • Size

      456KB

    • MD5

      8aa739b931758e1e365db4825da4f5ad

    • SHA1

      aaee2edf8138372eefbe7e29194b81a13d7b6f11

    • SHA256

      b587db23ae68c5106ef4f9f9af9a7b6746f9b79fd016ea91eaf53c9b8a8036d0

    • SHA512

      d5d259b5e3420e577f1ff9983e434b22267e7e020836d11a114159b477ace792c5e25b649a1f37a42bf3744d09d5bcbb62e3b01e2571a2c885a2c0758ab19640

    • SSDEEP

      6144:4DhMq4zPd+Nfhbm7n+D5ub9v95oingRyS4tV4Rts2t7Zfxfs287FbbxUtPl2:/zF+Nfhbm8m7nnguctdt1fF8std2

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks