Overview

overview

10

Static

static

1d56d51401...85.exe

windows7-x64

10

1d56d51401...85.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d56d514015f75dce61293b7d6e98f4823dacb9e6c2daf4bee23154506018785

  • Size

    71KB

  • Sample

    221207-ec72jsfa9x

  • MD5

    ca8d8370c0f9fef1dab3c111128012a1

  • SHA1

    5bb9d37127e5c9374f2c3de81d27f7685ed9d66a

  • SHA256

    1d56d514015f75dce61293b7d6e98f4823dacb9e6c2daf4bee23154506018785

  • SHA512

    448fd2f2e2c9b30974e2e3127c0fc75279d95319bd6ef5277937772c74586bae9ef1bf7b8f49b815044db5d07c9458d2bdea04878ac2e46c6cb625bb540b8445

  • SSDEEP

    768:0HsJa0pIq1aMjsZW4jzapIst58QN8pWOzX1OgD/B/6XN+S4mwAW/4B9ub45DxU8e:0MJa0JNjsE4viVV67Y98/4SgO8FxEBt

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1d56d514015f75dce61293b7d6e98f4823dacb9e6c2daf4bee23154506018785

    • Size

      71KB

    • MD5

      ca8d8370c0f9fef1dab3c111128012a1

    • SHA1

      5bb9d37127e5c9374f2c3de81d27f7685ed9d66a

    • SHA256

      1d56d514015f75dce61293b7d6e98f4823dacb9e6c2daf4bee23154506018785

    • SHA512

      448fd2f2e2c9b30974e2e3127c0fc75279d95319bd6ef5277937772c74586bae9ef1bf7b8f49b815044db5d07c9458d2bdea04878ac2e46c6cb625bb540b8445

    • SSDEEP

      768:0HsJa0pIq1aMjsZW4jzapIst58QN8pWOzX1OgD/B/6XN+S4mwAW/4B9ub45DxU8e:0MJa0JNjsE4viVV67Y98/4SgO8FxEBt

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks