Overview

overview

10

Static

static

3

Ganja85.exe

windows7-x64

10

Ganja85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ganja85.exe

  • Size

    83KB

  • Sample

    230614-pb8a2age64

  • MD5

    003d24bfd8e8c024540be33fd00ab21f

  • SHA1

    63ff96310c42dcaf4f19eaa2d09cd2a62ac55323

  • SHA256

    fa74b48382ca0d53d150b5cd006008c1a825782c9909fee7f341f0a0fd15ab63

  • SHA512

    3808175996e715889e225fa372e51e6c9ffe15a598bfa82f14822d72131f608dbd7e28e424d8e5cc3986641b01a42f6d98f6ab9dced836f0ae6d3cde1f76c9ce

  • SSDEEP

    1536:GtcAq1vpN8BXGr4t9LrgA742XtHP+9U2JqwbYJltvu/:Sc2DjLoktvj2JqwbYJlt2/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      Ganja85.exe

    • Size

      83KB

    • MD5

      003d24bfd8e8c024540be33fd00ab21f

    • SHA1

      63ff96310c42dcaf4f19eaa2d09cd2a62ac55323

    • SHA256

      fa74b48382ca0d53d150b5cd006008c1a825782c9909fee7f341f0a0fd15ab63

    • SHA512

      3808175996e715889e225fa372e51e6c9ffe15a598bfa82f14822d72131f608dbd7e28e424d8e5cc3986641b01a42f6d98f6ab9dced836f0ae6d3cde1f76c9ce

    • SSDEEP

      1536:GtcAq1vpN8BXGr4t9LrgA742XtHP+9U2JqwbYJltvu/:Sc2DjLoktvj2JqwbYJlt2/

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks