Overview

overview

10

Static

static

f79d7a3249...63.exe

windows7-x64

10

f79d7a3249...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f79d7a32491645a1ce049d70cbe54f38961c9069904c6de46bdb50dba80dda63

  • Size

    184KB

  • Sample

    221206-qhpypsed5s

  • MD5

    3c923814773870b91d39072c5c273bb0

  • SHA1

    bc0b149485da3bceab2e85c06dd10cad25e05622

  • SHA256

    f79d7a32491645a1ce049d70cbe54f38961c9069904c6de46bdb50dba80dda63

  • SHA512

    483a200a5d83d7ad8b4c5faf73fb27a7021a37b6318f9c2364543ef7cb8cb9cd5acd87f6d77bc1a906aab7b9d5aba57b4c8f2e92f6fcdff3ea24fbeb4b23f392

  • SSDEEP

    3072:GWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1U:GWkWXV9wUezUroW+tCmCCfNGH

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f79d7a32491645a1ce049d70cbe54f38961c9069904c6de46bdb50dba80dda63

    • Size

      184KB

    • MD5

      3c923814773870b91d39072c5c273bb0

    • SHA1

      bc0b149485da3bceab2e85c06dd10cad25e05622

    • SHA256

      f79d7a32491645a1ce049d70cbe54f38961c9069904c6de46bdb50dba80dda63

    • SHA512

      483a200a5d83d7ad8b4c5faf73fb27a7021a37b6318f9c2364543ef7cb8cb9cd5acd87f6d77bc1a906aab7b9d5aba57b4c8f2e92f6fcdff3ea24fbeb4b23f392

    • SSDEEP

      3072:GWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1U:GWkWXV9wUezUroW+tCmCCfNGH

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks