Overview

overview

10

Static

static

3

4dc26541b7...a7.exe

windows7-x64

10

4dc26541b7...a7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4dc26541b7eb52da2d70566347fcc0a7

  • Size

    1.4MB

  • Sample

    240109-jn6ebaafcm

  • MD5

    4dc26541b7eb52da2d70566347fcc0a7

  • SHA1

    c9847b94050c9e3c192dcc30b95e2c85327d2b81

  • SHA256

    d139c5e05242d5d0ee5b2b7ad05d65baa2e8281e2bc68cf756a4364619f31215

  • SHA512

    9eafaf8ea00d65f66df83a4d92b7568e51ef80470063e22e27940f69825dfc45f52bc4bf4e682905facf655a512bfc60191a5d12c6066e7f363233a247170b70

  • SSDEEP

    24576:UuhaCBhMMVOtNBYMMVOtNBYMMVOtNBYMMVOtWDgt34:bGDDDWDgto

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4dc26541b7eb52da2d70566347fcc0a7

    • Size

      1.4MB

    • MD5

      4dc26541b7eb52da2d70566347fcc0a7

    • SHA1

      c9847b94050c9e3c192dcc30b95e2c85327d2b81

    • SHA256

      d139c5e05242d5d0ee5b2b7ad05d65baa2e8281e2bc68cf756a4364619f31215

    • SHA512

      9eafaf8ea00d65f66df83a4d92b7568e51ef80470063e22e27940f69825dfc45f52bc4bf4e682905facf655a512bfc60191a5d12c6066e7f363233a247170b70

    • SSDEEP

      24576:UuhaCBhMMVOtNBYMMVOtNBYMMVOtNBYMMVOtWDgt34:bGDDDWDgto

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks