Overview

overview

10

Static

static

3

084cd83780...9c.exe

windows7-x64

10

084cd83780...9c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    084cd8378039b5b7a6f743e41557649c

  • Size

    1.8MB

  • Sample

    231225-f85rqsghd6

  • MD5

    084cd8378039b5b7a6f743e41557649c

  • SHA1

    9cb7b3536f2b8b6e19ea64a4b7627fd6d8a6c19b

  • SHA256

    d43d4deebb7038ac0f29749d1d307ffd260d1f7640c46d145ede8e25cdce376c

  • SHA512

    82a4ab337efa157c547817b8263fc843180dac9cce22eafc8e071032316f332c21b93fe39e0312aad196957a76a021e1d513309492988cee2df8b4e973575078

  • SSDEEP

    24576:UuhamBPeZJ8NI8NeZJ8NI8LBKeZJ8NI8NeZJ8NI8LBKeZJ8NI8NeZJ8NI8k:bI8a8F8a8F8a8k

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      084cd8378039b5b7a6f743e41557649c

    • Size

      1.8MB

    • MD5

      084cd8378039b5b7a6f743e41557649c

    • SHA1

      9cb7b3536f2b8b6e19ea64a4b7627fd6d8a6c19b

    • SHA256

      d43d4deebb7038ac0f29749d1d307ffd260d1f7640c46d145ede8e25cdce376c

    • SHA512

      82a4ab337efa157c547817b8263fc843180dac9cce22eafc8e071032316f332c21b93fe39e0312aad196957a76a021e1d513309492988cee2df8b4e973575078

    • SSDEEP

      24576:UuhamBPeZJ8NI8NeZJ8NI8LBKeZJ8NI8NeZJ8NI8LBKeZJ8NI8NeZJ8NI8k:bI8a8F8a8F8a8k

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks