Overview

overview

10

Static

static

3

0aba785f5b...0f.exe

windows7-x64

10

0aba785f5b...0f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0aba785f5b654d9949295d91dea29b0f

  • Size

    469KB

  • Sample

    231230-cafs6shbc7

  • MD5

    0aba785f5b654d9949295d91dea29b0f

  • SHA1

    b03c4bc86bc7c4b1523dd935b0dff3c45e038e14

  • SHA256

    5f84dfcc203d291c912137806f61997a748178de2b4b300ce679c96a415b93e3

  • SHA512

    7179595211e7337789bdcd76d7b843ec7b87f0dfe6a199d4bbcc4e2d226558de085f6b8d7f4dc6e2ea8858521ae3b9365d8a62e0f1943881264221a47031541c

  • SSDEEP

    6144:UZfec9EbXDk6RksKWnmy+g4IE2EorG1VVE+IqRQJ/os:UZWtI6RkQaku3s/os

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0aba785f5b654d9949295d91dea29b0f

    • Size

      469KB

    • MD5

      0aba785f5b654d9949295d91dea29b0f

    • SHA1

      b03c4bc86bc7c4b1523dd935b0dff3c45e038e14

    • SHA256

      5f84dfcc203d291c912137806f61997a748178de2b4b300ce679c96a415b93e3

    • SHA512

      7179595211e7337789bdcd76d7b843ec7b87f0dfe6a199d4bbcc4e2d226558de085f6b8d7f4dc6e2ea8858521ae3b9365d8a62e0f1943881264221a47031541c

    • SSDEEP

      6144:UZfec9EbXDk6RksKWnmy+g4IE2EorG1VVE+IqRQJ/os:UZWtI6RkQaku3s/os

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks