Overview

overview

10

Static

static

3

18fb3e6d33...74.exe

windows7-x64

10

18fb3e6d33...74.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18fb3e6d33a8812483cadae86974f974

  • Size

    753KB

  • Sample

    231225-m2xwwabad5

  • MD5

    18fb3e6d33a8812483cadae86974f974

  • SHA1

    408053279cd4d44d073182cdeb5e838407f63fc9

  • SHA256

    0fb1310d8730b5c9f697bc63cfe0b61fa82ecdb7ea16ff88018f8a6ad5fa8df8

  • SHA512

    439178f3e16a5b581280347d68dde045d9209ae3fc342b50ceda7fc29377843ca3d1e9e5f1bd36f7ac497f3c0a3c125b9dc43e00bcc44c8cabb4cb5008b2f087

  • SSDEEP

    6144:UZfec9EbXDk6Rk8K6rG1VVE+Ih/UOPSe570Szp3Znmy+g4yuHOhrG1VVE+Ih/UO5:UZWtI6RkAupOB06GOlupOB062H4

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      18fb3e6d33a8812483cadae86974f974

    • Size

      753KB

    • MD5

      18fb3e6d33a8812483cadae86974f974

    • SHA1

      408053279cd4d44d073182cdeb5e838407f63fc9

    • SHA256

      0fb1310d8730b5c9f697bc63cfe0b61fa82ecdb7ea16ff88018f8a6ad5fa8df8

    • SHA512

      439178f3e16a5b581280347d68dde045d9209ae3fc342b50ceda7fc29377843ca3d1e9e5f1bd36f7ac497f3c0a3c125b9dc43e00bcc44c8cabb4cb5008b2f087

    • SSDEEP

      6144:UZfec9EbXDk6Rk8K6rG1VVE+Ih/UOPSe570Szp3Znmy+g4yuHOhrG1VVE+Ih/UO5:UZWtI6RkAupOB06GOlupOB062H4

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks