Overview

overview

10

Static

static

3

f49a195633...JC.exe

windows7-x64

10

f49a195633...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f49a195633cf1038eb21149a350c0205_JC.exe

  • Size

    109KB

  • Sample

    230923-r7rz2agf2s

  • MD5

    f49a195633cf1038eb21149a350c0205

  • SHA1

    e98aa6d59d77a8396d9dc05c2f71b1a144b5a6a3

  • SHA256

    2add889da8561700bf2c738c83613891a2b1fbc1e3bbf88aef885960fecafa9d

  • SHA512

    272017f1fe353c4389e33474e2cf9404b8a6c8cb501f424aad7ef768be4395ddb5e221b1d75a5b2c22cfafce98af4548299e5ca2a6e1125ee11d12581107a0cc

  • SSDEEP

    3072:8dLCiFtNxR5TLhNN2J9OLCqwzBu1DjHLMVDqqkSpR:8YKNxR5hNUJ9Kwtu1DjrFqhz

Score
10/10
persistence

Malware Config

Targets

    • Target

      f49a195633cf1038eb21149a350c0205_JC.exe

    • Size

      109KB

    • MD5

      f49a195633cf1038eb21149a350c0205

    • SHA1

      e98aa6d59d77a8396d9dc05c2f71b1a144b5a6a3

    • SHA256

      2add889da8561700bf2c738c83613891a2b1fbc1e3bbf88aef885960fecafa9d

    • SHA512

      272017f1fe353c4389e33474e2cf9404b8a6c8cb501f424aad7ef768be4395ddb5e221b1d75a5b2c22cfafce98af4548299e5ca2a6e1125ee11d12581107a0cc

    • SSDEEP

      3072:8dLCiFtNxR5TLhNN2J9OLCqwzBu1DjHLMVDqqkSpR:8YKNxR5hNUJ9Kwtu1DjrFqhz

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks