Overview

overview

8

Static

static

1

reWASD651-7455.exe

windows10-1703-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    reWASD651-7455.exe

  • Size

    22.5MB

  • Sample

    230328-xn6xqsec8x

  • MD5

    ab59ba6d3be8a4a581c4c655144926e7

  • SHA1

    9d2310ba522e62eaa6e8c7b59a506df93c03a5cc

  • SHA256

    4eb3f1190787c75b2205366f83526146a04692270872799179fba7161d98d470

  • SHA512

    985d4dc906761fdcfbf180581c019c3dc8d2ae01e71244a913c9c6d86acbd19359ed8ab25919f91bc07409d8a4c942b6038c2d3ae264ab6e923cd2bc06a36aa3

  • SSDEEP

    393216:sd+TvJ9A8hNtpo11oAFD/0pO6FrOhNtqlF8zVpz24gSZ2d+Z58i9jX:hpofrJCO6FrUNt5pz24gdd+Z559jX

Score
8/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      reWASD651-7455.exe

    • Size

      22.5MB

    • MD5

      ab59ba6d3be8a4a581c4c655144926e7

    • SHA1

      9d2310ba522e62eaa6e8c7b59a506df93c03a5cc

    • SHA256

      4eb3f1190787c75b2205366f83526146a04692270872799179fba7161d98d470

    • SHA512

      985d4dc906761fdcfbf180581c019c3dc8d2ae01e71244a913c9c6d86acbd19359ed8ab25919f91bc07409d8a4c942b6038c2d3ae264ab6e923cd2bc06a36aa3

    • SSDEEP

      393216:sd+TvJ9A8hNtpo11oAFD/0pO6FrOhNtqlF8zVpz24gSZ2d+Z58i9jX:hpofrJCO6FrUNt5pz24gdd+Z559jX

    Score
    8/10
    discoveryevasionpersistence

    • Drops file in Drivers directory

    • Modifies Windows Firewall

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks