Overview

overview

10

Static

static

3

2cdbc6025a...c8.exe

windows7-x64

10

2cdbc6025a...c8.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cdbc6025ad3a61648f16921597e61c8

  • Size

    148KB

  • Sample

    231231-hztdfsdcbp

  • MD5

    2cdbc6025ad3a61648f16921597e61c8

  • SHA1

    085ab796360b2526352ce3285ac405161c8efca6

  • SHA256

    bb1a899904b030e7e7cf75c67865f9744fa08ce09e2f4456b772dd8b8a8c6ac8

  • SHA512

    dc183c65beda59e37207bcfed7c63bfe36ada9ac87034c7773048128530ebc9852d3c6020401a80bf0c7928db5039f3186ddd6824436ba861ce3a1823202b517

  • SSDEEP

    3072:Qdo+fgRs59j/pvkqBBac+RAGq1bg7Yfgst6OzOS79pgRZkhQJAOAU4oQZiETL/p:eoAbj/pvkqBBac+RAGq1bZHtrzOS77kU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2cdbc6025ad3a61648f16921597e61c8

    • Size

      148KB

    • MD5

      2cdbc6025ad3a61648f16921597e61c8

    • SHA1

      085ab796360b2526352ce3285ac405161c8efca6

    • SHA256

      bb1a899904b030e7e7cf75c67865f9744fa08ce09e2f4456b772dd8b8a8c6ac8

    • SHA512

      dc183c65beda59e37207bcfed7c63bfe36ada9ac87034c7773048128530ebc9852d3c6020401a80bf0c7928db5039f3186ddd6824436ba861ce3a1823202b517

    • SSDEEP

      3072:Qdo+fgRs59j/pvkqBBac+RAGq1bg7Yfgst6OzOS79pgRZkhQJAOAU4oQZiETL/p:eoAbj/pvkqBBac+RAGq1bZHtrzOS77kU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks