Overview

overview

8

Static

static

ConnectShe...11.exe

windows7-x64

8

ConnectShe...11.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ConnectShellSetup11.exe

  • Size

    609KB

  • Sample

    221213-nxyhaaee67

  • MD5

    00b6898bf01716f6fe6c1fc1e7256905

  • SHA1

    aedd9210f27091f9b8ad654b4558609c2688379d

  • SHA256

    919eca4e74525fe9a5caafcb0be729be64a9773d4607a2fb615f128f64b1faaf

  • SHA512

    48a0c45996f5165ccd86d2d6454f8738072f4911556e822a0ff6ba8f293802fca39290659c30a394796857bbe8734b6f9fa1bc74ef4dc66d16bb87643c9d18a5

  • SSDEEP

    12288:EA88Vmz5maLaNuGIoS30Dw6SVjgJfNJtPOu/u2/xLyRJWTLgRT06raYED/CyZeU/:EA3SeIvifNJxOuRTlN/CWuWO3A

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      ConnectShellSetup11.exe

    • Size

      609KB

    • MD5

      00b6898bf01716f6fe6c1fc1e7256905

    • SHA1

      aedd9210f27091f9b8ad654b4558609c2688379d

    • SHA256

      919eca4e74525fe9a5caafcb0be729be64a9773d4607a2fb615f128f64b1faaf

    • SHA512

      48a0c45996f5165ccd86d2d6454f8738072f4911556e822a0ff6ba8f293802fca39290659c30a394796857bbe8734b6f9fa1bc74ef4dc66d16bb87643c9d18a5

    • SSDEEP

      12288:EA88Vmz5maLaNuGIoS30Dw6SVjgJfNJtPOu/u2/xLyRJWTLgRT06raYED/CyZeU/:EA3SeIvifNJxOuRTlN/CWuWO3A

    Score
    8/10
    discoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks