Overview

overview

7

Static

static

3

Pivnoxybgg...xe.exe

windows7-x64

7

Pivnoxybgg...xe.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Pivnoxybggcadheda28_browsingExe.exe

  • Size

    160KB

  • Sample

    230802-ws9zhshh2x

  • MD5

    4bc743b0f4090cdd0c0fbcebfa996de9

  • SHA1

    1bbde685776cd633786d78ebdebd3f077fe82448

  • SHA256

    9f93a50cadd762d36788ce1c8d5deb2d26e109f717f3e2d4d5c8f0d3344de725

  • SHA512

    3c896870985a1af9d25151495e96e709e75afd1bc42fdf526bd4ef428393805a5dea2032fb6aa8491fbfa660a9d88cc4fdfce564d440b1d8ca57ee6485b5d884

  • SSDEEP

    3072:6yoHBBC3ueOa7Wigo11C0m3+qN6AiWSvDxX4WyB:6dPCv97W2gf+C6vVt4Wy

Score
7/10
persistence

Malware Config

Targets

    • Target

      Pivnoxybggcadheda28_browsingExe.exe

    • Size

      160KB

    • MD5

      4bc743b0f4090cdd0c0fbcebfa996de9

    • SHA1

      1bbde685776cd633786d78ebdebd3f077fe82448

    • SHA256

      9f93a50cadd762d36788ce1c8d5deb2d26e109f717f3e2d4d5c8f0d3344de725

    • SHA512

      3c896870985a1af9d25151495e96e709e75afd1bc42fdf526bd4ef428393805a5dea2032fb6aa8491fbfa660a9d88cc4fdfce564d440b1d8ca57ee6485b5d884

    • SSDEEP

      3072:6yoHBBC3ueOa7Wigo11C0m3+qN6AiWSvDxX4WyB:6dPCv97W2gf+C6vVt4Wy

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks