Overview

overview

10

Static

static

3

0f13002f6a...9a.exe

windows7-x64

5

0f13002f6a...9a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f13002f6a4ba3296a47548f90b6c09a

  • Size

    1.3MB

  • Sample

    231225-jdh62acghk

  • MD5

    0f13002f6a4ba3296a47548f90b6c09a

  • SHA1

    010c99a05cbfd65cf7c6c48bdb4e84b4e7d7f930

  • SHA256

    cad6ae9fed6c0079cf92aab58480994f3e1e2c2bf8566fa5eb7a5317bcb8b10d

  • SHA512

    f3b6cfe54e60ddaa7748f89561a9ea66657fe3990580e668af4d1bae3e9694c8d9c6d59f217b8ee22031143f7ac5f242e9152255a67adef2856d65ea737772de

  • SSDEEP

    12288:UZWtI6Rkg+erQZb+md4w1UAMitTiMr5ZlUCe+moBQbVKrDgJQPs/oQ:Uuhag+erQZb+md4wmAMGuSsCPBSt0OX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0f13002f6a4ba3296a47548f90b6c09a

    • Size

      1.3MB

    • MD5

      0f13002f6a4ba3296a47548f90b6c09a

    • SHA1

      010c99a05cbfd65cf7c6c48bdb4e84b4e7d7f930

    • SHA256

      cad6ae9fed6c0079cf92aab58480994f3e1e2c2bf8566fa5eb7a5317bcb8b10d

    • SHA512

      f3b6cfe54e60ddaa7748f89561a9ea66657fe3990580e668af4d1bae3e9694c8d9c6d59f217b8ee22031143f7ac5f242e9152255a67adef2856d65ea737772de

    • SSDEEP

      12288:UZWtI6Rkg+erQZb+md4w1UAMitTiMr5ZlUCe+moBQbVKrDgJQPs/oQ:Uuhag+erQZb+md4wmAMGuSsCPBSt0OX

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks