Overview

overview

10

Static

static

3

a3577a113f...fb.exe

windows7-x64

10

a3577a113f...fb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3577a113fdd38588a003118c0d317fb.exe

  • Size

    448KB

  • Sample

    240107-x6cfvacebj

  • MD5

    a3577a113fdd38588a003118c0d317fb

  • SHA1

    28136f2feca585fa77498db3517566815ad81b29

  • SHA256

    bbcdfdcf2f5779d0b00da2a50a275615a037ffa69db34e8fdf3c18bdf84ff97e

  • SHA512

    6b9bd1f703951185c289ee68bbbbbc8ffbd0221137244bf62a2dc5a7950436b2f65c541022735e8630b983772f6cfc6c32590d6bcc742fda5d54a756320a185c

  • SSDEEP

    6144:SSZMyhuhRpVZg395LDNj0ItLefQTDEqav7elvCQq0fxzYFv0c6InN8Er:SSZM7nGNjNBemDEqy7SvxVfEh6Iy8

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      a3577a113fdd38588a003118c0d317fb.exe

    • Size

      448KB

    • MD5

      a3577a113fdd38588a003118c0d317fb

    • SHA1

      28136f2feca585fa77498db3517566815ad81b29

    • SHA256

      bbcdfdcf2f5779d0b00da2a50a275615a037ffa69db34e8fdf3c18bdf84ff97e

    • SHA512

      6b9bd1f703951185c289ee68bbbbbc8ffbd0221137244bf62a2dc5a7950436b2f65c541022735e8630b983772f6cfc6c32590d6bcc742fda5d54a756320a185c

    • SSDEEP

      6144:SSZMyhuhRpVZg395LDNj0ItLefQTDEqav7elvCQq0fxzYFv0c6InN8Er:SSZM7nGNjNBemDEqy7SvxVfEh6Iy8

    Score
    10/10
    evasionpersistencetrojan

    • Modifies visibility of file extensions in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks