Overview

overview

10

Static

static

3

05d649709a...da.dll

windows7-x64

10

05d649709a...da.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    05d649709a046e92789db518f341d4da.exe

  • Size

    236KB

  • Sample

    240103-rzv2qaegek

  • MD5

    05d649709a046e92789db518f341d4da

  • SHA1

    19037da9c5e35e7bbed86f2132c06f4c16e87ec5

  • SHA256

    e2f5698fe054ef7c697d171be066ee38c0345741af0db9f84bbf1ca55db91d83

  • SHA512

    bcb31232c784319d7ed6099b92044ce6733435d083536439fd8fbca701995754092de2bf7c8a05c19469d92be449c09c7ed8003f585104b91256c8c0505e126c

  • SSDEEP

    3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIz:+Qj9U3jwO3rt58

Score
10/10
persistence

Malware Config

Targets

    • Target

      05d649709a046e92789db518f341d4da.exe

    • Size

      236KB

    • MD5

      05d649709a046e92789db518f341d4da

    • SHA1

      19037da9c5e35e7bbed86f2132c06f4c16e87ec5

    • SHA256

      e2f5698fe054ef7c697d171be066ee38c0345741af0db9f84bbf1ca55db91d83

    • SHA512

      bcb31232c784319d7ed6099b92044ce6733435d083536439fd8fbca701995754092de2bf7c8a05c19469d92be449c09c7ed8003f585104b91256c8c0505e126c

    • SSDEEP

      3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIz:+Qj9U3jwO3rt58

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks