Overview

overview

10

Static

static

3

1af4d8fabe...31.exe

windows7-x64

10

1af4d8fabe...31.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1af4d8fabe26e0a9e066f12146212b31

  • Size

    1.2MB

  • Sample

    231225-nmk47sddbq

  • MD5

    1af4d8fabe26e0a9e066f12146212b31

  • SHA1

    c6901b3ab22d12139d74fcf283174176ba13cadb

  • SHA256

    e93e3699438e88700665b987587d2f6734f08961679ee72cd41573232e7aba1c

  • SHA512

    ae1af6cb3726f02e2232a1a60f2e1b4d723221e8ae99a3acd8125d574994c08121801af5a2ae9059d8145067b78eef5d3ad480caef58869cf0168a5ed272776a

  • SSDEEP

    12288:UZWtI6RkIunuROB0fOWunuROB0XOKunuROB0fOWunuROB0L:Uuha2OWOyOWOe

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1af4d8fabe26e0a9e066f12146212b31

    • Size

      1.2MB

    • MD5

      1af4d8fabe26e0a9e066f12146212b31

    • SHA1

      c6901b3ab22d12139d74fcf283174176ba13cadb

    • SHA256

      e93e3699438e88700665b987587d2f6734f08961679ee72cd41573232e7aba1c

    • SHA512

      ae1af6cb3726f02e2232a1a60f2e1b4d723221e8ae99a3acd8125d574994c08121801af5a2ae9059d8145067b78eef5d3ad480caef58869cf0168a5ed272776a

    • SSDEEP

      12288:UZWtI6RkIunuROB0fOWunuROB0XOKunuROB0fOWunuROB0L:Uuha2OWOyOWOe

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks