Overview

overview

9

Static

static

1

0654d6ab35...05.exe

windows7-x64

9

0654d6ab35...05.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0654d6ab350581e595631beeb9079605

  • Size

    3.9MB

  • Sample

    231224-t7wz4aeff6

  • MD5

    0654d6ab350581e595631beeb9079605

  • SHA1

    a807801242f14ec106267c6c41f0fa4f8e9b7656

  • SHA256

    4a069324ef5e00a33b35c4870c95baf33293ea637d4886c7d7c0c0345809ae97

  • SHA512

    8910eb0bb77b09e2b94c4066cf8c0bd603dc440e4059ed925b386be2691087057dfa0184903633cf2fe9ffa6e14da08cda62d949ddf1fee4d8c9d743b888b3df

  • SSDEEP

    49152:I9V+LXbEKpO4JI4ZYr5SxA61wqOv46qy8B6r7J4CuRFxUPWlXypCasGSZf6e/Gpk:CYbbt3aMYr2wqM4NiN4sPpidac

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      0654d6ab350581e595631beeb9079605

    • Size

      3.9MB

    • MD5

      0654d6ab350581e595631beeb9079605

    • SHA1

      a807801242f14ec106267c6c41f0fa4f8e9b7656

    • SHA256

      4a069324ef5e00a33b35c4870c95baf33293ea637d4886c7d7c0c0345809ae97

    • SHA512

      8910eb0bb77b09e2b94c4066cf8c0bd603dc440e4059ed925b386be2691087057dfa0184903633cf2fe9ffa6e14da08cda62d949ddf1fee4d8c9d743b888b3df

    • SSDEEP

      49152:I9V+LXbEKpO4JI4ZYr5SxA61wqOv46qy8B6r7J4CuRFxUPWlXypCasGSZf6e/Gpk:CYbbt3aMYr2wqM4NiN4sPpidac

    Score
    9/10
    discoveryevasion

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks