Overview

overview

8

Static

static

1

File-Unive...24.exe

windows7-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    File-Universe.Sandbox.v32.2.1_737824.exe

  • Size

    14.3MB

  • Sample

    230417-zhhztshg2v

  • MD5

    6fd1a07f5f710341d9e1d4e18b68cdaf

  • SHA1

    43c0d8cac5e2b83af79aadea42d7202fa78ddd9b

  • SHA256

    0ecb876346cbf85ff36f4983bed844f1939c395e6453b6cfed28faa3e796d345

  • SHA512

    d1b8fc83eb09fd14df78bf3463659f3b29e956acaa70eb54c2ac6d5698467e411e51af0c79cc793193b3d40cec9893b9163fe10de1e5bfa4a42b603a5c5f5006

  • SSDEEP

    393216:lvPJzIS+3WFGw+cBZWOpq9bwJsv6tWKFdu9Ceuqa:lHJL+3WF/+c4uqa

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      File-Universe.Sandbox.v32.2.1_737824.exe

    • Size

      14.3MB

    • MD5

      6fd1a07f5f710341d9e1d4e18b68cdaf

    • SHA1

      43c0d8cac5e2b83af79aadea42d7202fa78ddd9b

    • SHA256

      0ecb876346cbf85ff36f4983bed844f1939c395e6453b6cfed28faa3e796d345

    • SHA512

      d1b8fc83eb09fd14df78bf3463659f3b29e956acaa70eb54c2ac6d5698467e411e51af0c79cc793193b3d40cec9893b9163fe10de1e5bfa4a42b603a5c5f5006

    • SSDEEP

      393216:lvPJzIS+3WFGw+cBZWOpq9bwJsv6tWKFdu9Ceuqa:lHJL+3WF/+c4uqa

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks