Overview

overview

10

Static

static

3

e80566b376...fd.exe

windows7-x64

10

e80566b376...fd.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    e80566b376bbe493916f4e8cece9adfd.exe

  • Size

    402KB

  • Sample

    240109-w3xf6sfeap

  • MD5

    e80566b376bbe493916f4e8cece9adfd

  • SHA1

    53efe866b6ebdce38540a523bc5b2d111bcd8e48

  • SHA256

    3cace29fd62424446850bad27e71fa939c43e181fdcc113e5504b47b9e221e1b

  • SHA512

    99dc3da9890fd5941d6b4201d40fa8e55ea39b798c13aa9fbe9f8bde861bc2053b5e73f74e956836bfd94a2d37261b6582aafc2897286b64a826317548337b54

  • SSDEEP

    6144:UZfec9EbXDk6RkCBEKME2EJuHOME2EVqqrG1VVE+IA:UZWtI6RkCBhwODVq+ut

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e80566b376bbe493916f4e8cece9adfd.exe

    • Size

      402KB

    • MD5

      e80566b376bbe493916f4e8cece9adfd

    • SHA1

      53efe866b6ebdce38540a523bc5b2d111bcd8e48

    • SHA256

      3cace29fd62424446850bad27e71fa939c43e181fdcc113e5504b47b9e221e1b

    • SHA512

      99dc3da9890fd5941d6b4201d40fa8e55ea39b798c13aa9fbe9f8bde861bc2053b5e73f74e956836bfd94a2d37261b6582aafc2897286b64a826317548337b54

    • SSDEEP

      6144:UZfec9EbXDk6RkCBEKME2EJuHOME2EVqqrG1VVE+IA:UZWtI6RkCBhwODVq+ut

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks