Overview

overview

10

Static

static

3

1ec1f55790...de.exe

windows7-x64

10

1ec1f55790...de.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ec1f55790bda4ce08a4e457196d5dde.exe

  • Size

    63KB

  • Sample

    240103-rzlhaahbd7

  • MD5

    1ec1f55790bda4ce08a4e457196d5dde

  • SHA1

    1093fb57b0b6fdf496f49971e330d6042da826e8

  • SHA256

    4f4f994f2f5f7623672c03ba0f1fcc5b74d7de07b6ac1c37542d3a19bac162d3

  • SHA512

    fab91c8be7f72336dc0e72e1e32f718df496396c2343d129d978668c21c8f250621442fd8c200c9761e2026df79fcbb27c55aa82cd3d725d3b508bfd91eb9e9b

  • SSDEEP

    1536:/I4X6261WhEwYHVM3kq06SsIS2zSSAZiSNjlC6aWte4iUa:Q8CwYHVM3tUOVblCKBHa

Score
10/10
persistence

Malware Config

Extracted

Credentials

  • Protocol:     smtp
  • Host:
    smtp.gmail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    azerty28

Targets

    • Target

      1ec1f55790bda4ce08a4e457196d5dde.exe

    • Size

      63KB

    • MD5

      1ec1f55790bda4ce08a4e457196d5dde

    • SHA1

      1093fb57b0b6fdf496f49971e330d6042da826e8

    • SHA256

      4f4f994f2f5f7623672c03ba0f1fcc5b74d7de07b6ac1c37542d3a19bac162d3

    • SHA512

      fab91c8be7f72336dc0e72e1e32f718df496396c2343d129d978668c21c8f250621442fd8c200c9761e2026df79fcbb27c55aa82cd3d725d3b508bfd91eb9e9b

    • SSDEEP

      1536:/I4X6261WhEwYHVM3kq06SsIS2zSSAZiSNjlC6aWte4iUa:Q8CwYHVM3tUOVblCKBHa

    Score
    10/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks