Overview

overview

10

Static

static

3

d700806774...6f.exe

windows7-x64

3

d700806774...6f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7008067746ea693dfc3f44b8b6a8d6f.exe

  • Size

    427KB

  • Sample

    231230-xlwnzsbggp

  • MD5

    d7008067746ea693dfc3f44b8b6a8d6f

  • SHA1

    edba92d47bfb585e812fe997a434bebba9cdaa75

  • SHA256

    488c072b20441c081435be89f82f4789135729a0ae3fc1015f496d7a321e4c4a

  • SHA512

    5e3d79612b174c324438d0b53967977dcc04d5f8a021218da86b3ca19108f77835b22a775d98d5742982891243412a092011d8e74e5667b7ce8ccd913d52be98

  • SSDEEP

    6144:PY+xmmavakuBASTYaT15f7o+STYaT15fAK8yfMx/D4LJZPlVcxqy1:gU9avapTTYapJoTYapz8ye49vWq

Score
10/10
persistence

Malware Config

Targets

    • Target

      d7008067746ea693dfc3f44b8b6a8d6f.exe

    • Size

      427KB

    • MD5

      d7008067746ea693dfc3f44b8b6a8d6f

    • SHA1

      edba92d47bfb585e812fe997a434bebba9cdaa75

    • SHA256

      488c072b20441c081435be89f82f4789135729a0ae3fc1015f496d7a321e4c4a

    • SHA512

      5e3d79612b174c324438d0b53967977dcc04d5f8a021218da86b3ca19108f77835b22a775d98d5742982891243412a092011d8e74e5667b7ce8ccd913d52be98

    • SSDEEP

      6144:PY+xmmavakuBASTYaT15f7o+STYaT15fAK8yfMx/D4LJZPlVcxqy1:gU9avapTTYapJoTYapz8ye49vWq

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks