Overview

overview

10

Static

static

3

cc1475a959...2d.exe

windows7-x64

10

cc1475a959...2d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc1475a95918f9a00e9521322c68772d.exe

  • Size

    109KB

  • Sample

    240102-s2de5aggdk

  • MD5

    cc1475a95918f9a00e9521322c68772d

  • SHA1

    1d3756ce09a9331cb669ef7e2593da14a9a92a9f

  • SHA256

    94e2b8d07a540957537ff34f6a9449d3cffdafb8641f7d7718b206442af9de0c

  • SHA512

    87e1f975428e96e639da9b06566aacdbe84b4c3f08779742674152a60a30cb73f8ffe90dcf3196379f25ef962bd055ba52636982d0cb2becf61c6c7183cb885a

  • SSDEEP

    1536:1amlu3hbBGy3G8nhMp7WGq6KfFkWGq6cjTA:1reMPd7WGqFdkWGqzjTA

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cc1475a95918f9a00e9521322c68772d.exe

    • Size

      109KB

    • MD5

      cc1475a95918f9a00e9521322c68772d

    • SHA1

      1d3756ce09a9331cb669ef7e2593da14a9a92a9f

    • SHA256

      94e2b8d07a540957537ff34f6a9449d3cffdafb8641f7d7718b206442af9de0c

    • SHA512

      87e1f975428e96e639da9b06566aacdbe84b4c3f08779742674152a60a30cb73f8ffe90dcf3196379f25ef962bd055ba52636982d0cb2becf61c6c7183cb885a

    • SSDEEP

      1536:1amlu3hbBGy3G8nhMp7WGq6KfFkWGq6cjTA:1reMPd7WGqFdkWGqzjTA

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks