Overview

overview

8

Static

static

3

1445fcfc63...2a.exe

windows7-x64

8

1445fcfc63...2a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1445fcfc63374a8000f00bdf5ac4292a

  • Size

    577KB

  • Sample

    231230-k83plafheq

  • MD5

    1445fcfc63374a8000f00bdf5ac4292a

  • SHA1

    3182df80c8a55b36e34e279940729ac889571364

  • SHA256

    581e8e1f5ba1a0bbcd4133dbcfe3ca2cada50a7bd6d322f5202920927a6bb1c4

  • SHA512

    50977fd4f9af8150de00598d9eaf4eaf854605ef99cb67ca99bb008120cc9b1a8dc65e32f66c637de10c8d8f40d5b03366b8b893251d135f31be8ada41efd428

  • SSDEEP

    12288:m9ybtnZ//HWfyl36hQ68eedvn/bmhILXSxP:iqvXHWal35cSTJLXSx

Score
8/10
persistence

Malware Config

Targets

    • Target

      1445fcfc63374a8000f00bdf5ac4292a

    • Size

      577KB

    • MD5

      1445fcfc63374a8000f00bdf5ac4292a

    • SHA1

      3182df80c8a55b36e34e279940729ac889571364

    • SHA256

      581e8e1f5ba1a0bbcd4133dbcfe3ca2cada50a7bd6d322f5202920927a6bb1c4

    • SHA512

      50977fd4f9af8150de00598d9eaf4eaf854605ef99cb67ca99bb008120cc9b1a8dc65e32f66c637de10c8d8f40d5b03366b8b893251d135f31be8ada41efd428

    • SSDEEP

      12288:m9ybtnZ//HWfyl36hQ68eedvn/bmhILXSxP:iqvXHWal35cSTJLXSx

    Score
    8/10
    persistence

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks