Overview

overview

10

Static

static

3

643c262f7f...59.exe

windows7-x64

10

643c262f7f...59.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    643c262f7f19d48f60cf78ab59649c59

  • Size

    15KB

  • Sample

    231226-lkgmwshdgq

  • MD5

    643c262f7f19d48f60cf78ab59649c59

  • SHA1

    cb0259819f45f4436ba3822d56a0172a809fe2d0

  • SHA256

    d48d27347e90c281ae972f2701b810eeed542fe75b0484503e191809329a77a8

  • SHA512

    fbcfda9f3c11005361f2c26112d7c28b7bd3ab516feb7e6064079b47c3e28d19e239cd94672cd6aba6b93cfe1c3a8b45887f0826b7566a1ca42bab6c82d4029f

  • SSDEEP

    384:olbDko2vDqBiRvbkzsgSzzC4nMZ/ZdqwBNoC:abDJ2uodB4Z3b

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      643c262f7f19d48f60cf78ab59649c59

    • Size

      15KB

    • MD5

      643c262f7f19d48f60cf78ab59649c59

    • SHA1

      cb0259819f45f4436ba3822d56a0172a809fe2d0

    • SHA256

      d48d27347e90c281ae972f2701b810eeed542fe75b0484503e191809329a77a8

    • SHA512

      fbcfda9f3c11005361f2c26112d7c28b7bd3ab516feb7e6064079b47c3e28d19e239cd94672cd6aba6b93cfe1c3a8b45887f0826b7566a1ca42bab6c82d4029f

    • SSDEEP

      384:olbDko2vDqBiRvbkzsgSzzC4nMZ/ZdqwBNoC:abDJ2uodB4Z3b

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks