Overview

overview

10

Static

static

3

51ba80f945...23.exe

windows7-x64

10

51ba80f945...23.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    51ba80f945f45bbbd1592037f24c2d23

  • Size

    76KB

  • Sample

    240110-1wckmshhd8

  • MD5

    51ba80f945f45bbbd1592037f24c2d23

  • SHA1

    559624cd7bd4e4c9e8842781c1b349a2d735c1bc

  • SHA256

    997c0f1d374dad77722be3045e155f2f812416a083f9fee11170e9592031d46e

  • SHA512

    83beca01da4b8ea0959ab2890c2c8dbabc4f686402b66dd9c1ff4bf4527ff0a57dd782347209de7e31cc07e46a1543b2d20434d1c489733f14117bacee1ec8e1

  • SSDEEP

    1536:ufq44Q2etZbfbOKK4W6EjIMuAZGKkx1nLCDlbQa6TaXLiUjFlJK:Nf4ZbzOKUjIM3ZGhnLC9OaOYw

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      51ba80f945f45bbbd1592037f24c2d23

    • Size

      76KB

    • MD5

      51ba80f945f45bbbd1592037f24c2d23

    • SHA1

      559624cd7bd4e4c9e8842781c1b349a2d735c1bc

    • SHA256

      997c0f1d374dad77722be3045e155f2f812416a083f9fee11170e9592031d46e

    • SHA512

      83beca01da4b8ea0959ab2890c2c8dbabc4f686402b66dd9c1ff4bf4527ff0a57dd782347209de7e31cc07e46a1543b2d20434d1c489733f14117bacee1ec8e1

    • SSDEEP

      1536:ufq44Q2etZbfbOKK4W6EjIMuAZGKkx1nLCDlbQa6TaXLiUjFlJK:Nf4ZbzOKUjIM3ZGhnLC9OaOYw

    Score
    10/10
    evasionpersistence

    • Modifies security service

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Sets file execution options in registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks