Overview

overview

10

Static

static

a9b31e6d39...f5.exe

windows7-x64

10

a9b31e6d39...f5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9b31e6d3928bac01368cdd0d51509bcb50e0c0b2989f46339a7b18cea6594f5

  • Size

    434KB

  • Sample

    221206-qgfzeaec6t

  • MD5

    3466b8c8b222679d72c57ccb61a35331

  • SHA1

    4e1d4097b9556823b254ce3553cf2050473f63f4

  • SHA256

    a9b31e6d3928bac01368cdd0d51509bcb50e0c0b2989f46339a7b18cea6594f5

  • SHA512

    cee3114df3ee4de61324fed19f653d5c6998c39df44324b7bd7631d45acaecfcf1a77df800ef8dcb0a5d407ad515194a61b36164d03ce183521e7ea79d87cfd7

  • SSDEEP

    12288:nWWVmQdOw0tp2cYM0jz1H0n85Eny0PqqHQ:B1dncYMGz1H0vhPqx

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a9b31e6d3928bac01368cdd0d51509bcb50e0c0b2989f46339a7b18cea6594f5

    • Size

      434KB

    • MD5

      3466b8c8b222679d72c57ccb61a35331

    • SHA1

      4e1d4097b9556823b254ce3553cf2050473f63f4

    • SHA256

      a9b31e6d3928bac01368cdd0d51509bcb50e0c0b2989f46339a7b18cea6594f5

    • SHA512

      cee3114df3ee4de61324fed19f653d5c6998c39df44324b7bd7631d45acaecfcf1a77df800ef8dcb0a5d407ad515194a61b36164d03ce183521e7ea79d87cfd7

    • SSDEEP

      12288:nWWVmQdOw0tp2cYM0jz1H0n85Eny0PqqHQ:B1dncYMGz1H0vhPqx

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks