Overview

overview

8

Static

static

3

0f394734c6...2d.exe

windows7-x64

8

0f394734c6...2d.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f394734c65d44915060b36a0b1a972d

  • Size

    365KB

  • Sample

    231230-fkmk9ahdek

  • MD5

    0f394734c65d44915060b36a0b1a972d

  • SHA1

    426bc6bb3704441e5804d75ad020706f06b3db5d

  • SHA256

    7dee2bd4e317d12c9a2923d0531526822cfd37eabfd7aecc74258bb4f2d3a643

  • SHA512

    95dd09d429746ec95a86b731f2e86b643c35273a0f8d9350ba0d6b821ec082273aeb32463aecf98e5f36af3b0dc7e9dbe38d6b9208d8cea5d3b89708bb0b2f81

  • SSDEEP

    6144:6GdIfnPxW3l1zo9X14HyuciAhM7vk6uGQzgYsCmXiL+jvJNxvgfD:1dIKlahgzAhMQ6u9gYsCmXJjvHFa

Score
8/10
persistence

Malware Config

Targets

    • Target

      0f394734c65d44915060b36a0b1a972d

    • Size

      365KB

    • MD5

      0f394734c65d44915060b36a0b1a972d

    • SHA1

      426bc6bb3704441e5804d75ad020706f06b3db5d

    • SHA256

      7dee2bd4e317d12c9a2923d0531526822cfd37eabfd7aecc74258bb4f2d3a643

    • SHA512

      95dd09d429746ec95a86b731f2e86b643c35273a0f8d9350ba0d6b821ec082273aeb32463aecf98e5f36af3b0dc7e9dbe38d6b9208d8cea5d3b89708bb0b2f81

    • SSDEEP

      6144:6GdIfnPxW3l1zo9X14HyuciAhM7vk6uGQzgYsCmXiL+jvJNxvgfD:1dIKlahgzAhMQ6u9gYsCmXJjvHFa

    Score
    8/10
    persistence

    • Drops file in Drivers directory

    • Sets DLL path for service in the registry

      persistence

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks