Overview

overview

10

Static

static

3

02644cae16...4d.exe

windows7-x64

1

02644cae16...4d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    02644cae1651a1f1ed9d8e39ba26664d

  • Size

    122KB

  • Sample

    231229-yns7baahe2

  • MD5

    02644cae1651a1f1ed9d8e39ba26664d

  • SHA1

    8fbb324c2dfe0b38ed08c46688455b5fc7d1618d

  • SHA256

    cd484d7d4095cc75fa062c0473845fa3d24f12fcd65b515969fde77f096761b2

  • SHA512

    27009f8f619b6ffed0dce23102667921e4306839c8e930a5c3a7c3c3963eb2d069e29c0edbdda8ab48c1d5ee2bbae4eb3c222fc57540a9f5ed99ab52b1776d72

  • SSDEEP

    3072:fcvjxMYHu6G3uBiceyWPKGF8HbUD2XN+ViTWuff1wTgIbj97:09MYHT8MkMOiTWu

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      02644cae1651a1f1ed9d8e39ba26664d

    • Size

      122KB

    • MD5

      02644cae1651a1f1ed9d8e39ba26664d

    • SHA1

      8fbb324c2dfe0b38ed08c46688455b5fc7d1618d

    • SHA256

      cd484d7d4095cc75fa062c0473845fa3d24f12fcd65b515969fde77f096761b2

    • SHA512

      27009f8f619b6ffed0dce23102667921e4306839c8e930a5c3a7c3c3963eb2d069e29c0edbdda8ab48c1d5ee2bbae4eb3c222fc57540a9f5ed99ab52b1776d72

    • SSDEEP

      3072:fcvjxMYHu6G3uBiceyWPKGF8HbUD2XN+ViTWuff1wTgIbj97:09MYHT8MkMOiTWu

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks