Overview

overview

8

Static

static

3

d056c41856...e7.exe

windows7-x64

7

d056c41856...e7.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d056c418568dd86d47c90501a8720138235ebb34c22e59e37efce00635930ce7

  • Size

    6.5MB

  • Sample

    231114-xss7faed29

  • MD5

    70122224b1c86d872233c6ca0b690fe5

  • SHA1

    e682b4037538ef9eb3e9b7fbabf94a6856de0620

  • SHA256

    d056c418568dd86d47c90501a8720138235ebb34c22e59e37efce00635930ce7

  • SHA512

    fc7b8542554bd0b2cdd19d24fe5a22d3407ac06068ba22621d0f38be0b6d628e7250d6bef8bdebdb38ac81934059bd5fd6ea359361596b7133c7aece05260d4d

  • SSDEEP

    98304:GbHBJM8U9VfiDqJw59FBSD3Xv7A7rNJQeKBddwWLObUChI78n+S73j3q1:GbHBi86Vq+Jw5/O07jJid7kIC+qbq1

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      d056c418568dd86d47c90501a8720138235ebb34c22e59e37efce00635930ce7

    • Size

      6.5MB

    • MD5

      70122224b1c86d872233c6ca0b690fe5

    • SHA1

      e682b4037538ef9eb3e9b7fbabf94a6856de0620

    • SHA256

      d056c418568dd86d47c90501a8720138235ebb34c22e59e37efce00635930ce7

    • SHA512

      fc7b8542554bd0b2cdd19d24fe5a22d3407ac06068ba22621d0f38be0b6d628e7250d6bef8bdebdb38ac81934059bd5fd6ea359361596b7133c7aece05260d4d

    • SSDEEP

      98304:GbHBJM8U9VfiDqJw59FBSD3Xv7A7rNJQeKBddwWLObUChI78n+S73j3q1:GbHBi86Vq+Jw5/O07jJid7kIC+qbq1

    Score
    8/10
    persistenceevasion

    • Blocklisted process makes network request

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks