Overview

overview

10

Static

static

3

eae4038c6e...56.exe

windows7-x64

10

eae4038c6e...56.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eae4038c6eff2b142ee6102098b59a56.exe

  • Size

    66KB

  • Sample

    240109-wx2tpsfcak

  • MD5

    eae4038c6eff2b142ee6102098b59a56

  • SHA1

    ca99a3df09432312a04280acc2d4886de3a94039

  • SHA256

    87877be180a011383a84b8cce758ac4afa6d72c37d534ad8cb7f7314bc6c255c

  • SHA512

    5af4766cc9b3d82cda92909107f1326a2af6923fc24c2c4860cd7afe6111124c049b497b922cc40ada1b12c1c5b66cf574ea6b60eaeb47a0ea9e20cb2655a7e9

  • SSDEEP

    1536:kwn4pThYqOVppLPEJydSvfJrWoZ7ICQ+h5L6l8Dwn4pThYqOVppLPEJyd:Bj39gJyaJrxZ7IM6Wsj39gJy

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eae4038c6eff2b142ee6102098b59a56.exe

    • Size

      66KB

    • MD5

      eae4038c6eff2b142ee6102098b59a56

    • SHA1

      ca99a3df09432312a04280acc2d4886de3a94039

    • SHA256

      87877be180a011383a84b8cce758ac4afa6d72c37d534ad8cb7f7314bc6c255c

    • SHA512

      5af4766cc9b3d82cda92909107f1326a2af6923fc24c2c4860cd7afe6111124c049b497b922cc40ada1b12c1c5b66cf574ea6b60eaeb47a0ea9e20cb2655a7e9

    • SSDEEP

      1536:kwn4pThYqOVppLPEJydSvfJrWoZ7ICQ+h5L6l8Dwn4pThYqOVppLPEJyd:Bj39gJyaJrxZ7IM6Wsj39gJy

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables cmd.exe use via registry modification

      evasion

    • Drops file in Drivers directory

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks