Overview

overview

8

Static

static

3

StartAllBa...ch.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    StartAllBack_3.x_Patch.exe

  • Size

    63KB

  • Sample

    230716-s6gcksfe34

  • MD5

    07ca9ef8ca62bdfdcb8bd9b966d60bf2

  • SHA1

    54bbb2bfd527ec503e66fe0db1c99a568c0240e8

  • SHA256

    124a96831880a7f4ec1c70705466b9a48723ca387f7abc12f0d28d28a18edf20

  • SHA512

    d0f0b0d5c01c0dcbc8458e509348f7e7969b87bd6261242e3488d9fef61f7e335f1fdcc9eb4bc777045202b6ebb5fa231fc39575f3da81163f82290e20b47e85

  • SSDEEP

    1536:Vg6JzfNCUod2REhHMHwvG9wF2DxzYjVxT:DfIUocEqH9NzYhx

Score
8/10
persistence

Malware Config

Targets

    • Target

      StartAllBack_3.x_Patch.exe

    • Size

      63KB

    • MD5

      07ca9ef8ca62bdfdcb8bd9b966d60bf2

    • SHA1

      54bbb2bfd527ec503e66fe0db1c99a568c0240e8

    • SHA256

      124a96831880a7f4ec1c70705466b9a48723ca387f7abc12f0d28d28a18edf20

    • SHA512

      d0f0b0d5c01c0dcbc8458e509348f7e7969b87bd6261242e3488d9fef61f7e335f1fdcc9eb4bc777045202b6ebb5fa231fc39575f3da81163f82290e20b47e85

    • SSDEEP

      1536:Vg6JzfNCUod2REhHMHwvG9wF2DxzYjVxT:DfIUocEqH9NzYhx

    Score
    8/10
    persistence

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks