Overview

overview

10

Static

static

3

49f1fdb053...19.exe

windows7-x64

10

49f1fdb053...19.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    49f1fdb0531c8d941224adabb4541b19

  • Size

    77KB

  • Sample

    240107-2ft1esfefk

  • MD5

    49f1fdb0531c8d941224adabb4541b19

  • SHA1

    6de1447ae1ae755450a9ec443374fc9ddafb4afa

  • SHA256

    692d1b5efb5b54a8fd968abec64aabc1ae98e44fe1444e8972d7559525d97cac

  • SHA512

    b4bc0ca8364fcf14c439e96d9f6230402751420477064d1962ffa0bf825fb70bc4967870bd932ecb01879b50e3513cd64c278d96ab23be4aa4b7f28e8f44efe9

  • SSDEEP

    768:kodA3CdMdh+IMOMyaQgUoRYphOdEDug4CNFLLD0raMjbsvwFgpyYbBIKXOXgXRVu:nA3CdMX5aQQmqGDxHL0P7gpPLbqsB

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      49f1fdb0531c8d941224adabb4541b19

    • Size

      77KB

    • MD5

      49f1fdb0531c8d941224adabb4541b19

    • SHA1

      6de1447ae1ae755450a9ec443374fc9ddafb4afa

    • SHA256

      692d1b5efb5b54a8fd968abec64aabc1ae98e44fe1444e8972d7559525d97cac

    • SHA512

      b4bc0ca8364fcf14c439e96d9f6230402751420477064d1962ffa0bf825fb70bc4967870bd932ecb01879b50e3513cd64c278d96ab23be4aa4b7f28e8f44efe9

    • SSDEEP

      768:kodA3CdMdh+IMOMyaQgUoRYphOdEDug4CNFLLD0raMjbsvwFgpyYbBIKXOXgXRVu:nA3CdMX5aQQmqGDxHL0P7gpPLbqsB

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables cmd.exe use via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks