Overview

overview

10

Static

static

af3e6550e7...2f.exe

windows7-x64

10

af3e6550e7...2f.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    af3e6550e70f594827a1af5f90414b00c4668fb7b06dfe6fdcd6d1a43af4b22f

  • Size

    227KB

  • Sample

    221207-c35yrsge72

  • MD5

    321d12a87952f3e8dfefff21a52569f0

  • SHA1

    0523ed5d01b01cedeef5881d1734ef281f937f43

  • SHA256

    af3e6550e70f594827a1af5f90414b00c4668fb7b06dfe6fdcd6d1a43af4b22f

  • SHA512

    8d63a81cade04397bcf7fbdddbdd14dadd361b184b1da76bf3584cdc7e3c8974d108dfae70efce670444e0f3ce0b78d2b04527821af1d6fa4c32c505e905fce0

  • SSDEEP

    3072:N+ulczZwbYfa0yTVrs063bKvVBPWwGHWtRcHOnCSeoufiyp:ZnvTFAaBPlRcuCSYqe

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      af3e6550e70f594827a1af5f90414b00c4668fb7b06dfe6fdcd6d1a43af4b22f

    • Size

      227KB

    • MD5

      321d12a87952f3e8dfefff21a52569f0

    • SHA1

      0523ed5d01b01cedeef5881d1734ef281f937f43

    • SHA256

      af3e6550e70f594827a1af5f90414b00c4668fb7b06dfe6fdcd6d1a43af4b22f

    • SHA512

      8d63a81cade04397bcf7fbdddbdd14dadd361b184b1da76bf3584cdc7e3c8974d108dfae70efce670444e0f3ce0b78d2b04527821af1d6fa4c32c505e905fce0

    • SSDEEP

      3072:N+ulczZwbYfa0yTVrs063bKvVBPWwGHWtRcHOnCSeoufiyp:ZnvTFAaBPlRcuCSYqe

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks