Overview

overview

8

Static

static

3

test.exe

windows7-x64

6

test.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.exe

  • Size

    460KB

  • Sample

    230808-tn8vjsfd5z

  • MD5

    5a3309507cba47d2e35ce7db68ef0c86

  • SHA1

    4862d9072be1568377347b4e1556d8d2cc349f43

  • SHA256

    e6f0f75653f735bc4cd8d164d536430945f152d578918e373d08fd7dfbdec028

  • SHA512

    d5abf0d9e1897c22186229fcb97b0a74c290e2c01f1ad197b2c90bed475e35ee8f3319303a26d703493b8d39e3e6983ba37368bdce27b615ef5043cbbab03802

  • SSDEEP

    12288:ljq4EKEb828QWBiANUxCj2AqeMQmNntl:ljqLZ0iANuGKFNnt

Score
8/10
persistence

Malware Config

Targets

    • Target

      test.exe

    • Size

      460KB

    • MD5

      5a3309507cba47d2e35ce7db68ef0c86

    • SHA1

      4862d9072be1568377347b4e1556d8d2cc349f43

    • SHA256

      e6f0f75653f735bc4cd8d164d536430945f152d578918e373d08fd7dfbdec028

    • SHA512

      d5abf0d9e1897c22186229fcb97b0a74c290e2c01f1ad197b2c90bed475e35ee8f3319303a26d703493b8d39e3e6983ba37368bdce27b615ef5043cbbab03802

    • SSDEEP

      12288:ljq4EKEb828QWBiANUxCj2AqeMQmNntl:ljqLZ0iANuGKFNnt

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Sets service image path in registry

      persistence

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks