Overview

overview

10

Static

static

f811c3e934...2a.exe

windows7-x64

10

f811c3e934...2a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f811c3e934e8bf005fb3ad8db0442ee796053d606f8de4ed28c51dc56dbf452a

  • Size

    92KB

  • Sample

    221206-vs1keaba61

  • MD5

    ef7f6e3cedd1d33c3c5cd94c5fa3d7ac

  • SHA1

    9bb19d67069a708593449f947941bedf48ddc153

  • SHA256

    f811c3e934e8bf005fb3ad8db0442ee796053d606f8de4ed28c51dc56dbf452a

  • SHA512

    1823d69ea49d3553db16741255b956d17309fe2b700d4da7dcdbf6fbc429c77a60ef36cf016ca896c40c973c42a7c9b2d289c9f7ffaeee1b8b08a5115a78a73e

  • SSDEEP

    1536:dI4KTgsyWV/IN6SMs4K/lhHNHfN8fbT+EQ7JI85W4OQ0mp3kdc41j4Kk4K:dI4hMs48hHNVEb6G+WV03kKaj4h4

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f811c3e934e8bf005fb3ad8db0442ee796053d606f8de4ed28c51dc56dbf452a

    • Size

      92KB

    • MD5

      ef7f6e3cedd1d33c3c5cd94c5fa3d7ac

    • SHA1

      9bb19d67069a708593449f947941bedf48ddc153

    • SHA256

      f811c3e934e8bf005fb3ad8db0442ee796053d606f8de4ed28c51dc56dbf452a

    • SHA512

      1823d69ea49d3553db16741255b956d17309fe2b700d4da7dcdbf6fbc429c77a60ef36cf016ca896c40c973c42a7c9b2d289c9f7ffaeee1b8b08a5115a78a73e

    • SSDEEP

      1536:dI4KTgsyWV/IN6SMs4K/lhHNHfN8fbT+EQ7JI85W4OQ0mp3kdc41j4Kk4K:dI4hMs48hHNVEb6G+WV03kKaj4h4

    Score
    10/10
    evasionpersistence

    • Modifies system executable filetype association

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Sets file execution options in registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks