Overview

overview

10

Static

static

3

bfb5eeddc4...dd.exe

windows7-x64

10

bfb5eeddc4...dd.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfb5eeddc4ff027d1edcbb75a09554dd.exe

  • Size

    303KB

  • Sample

    240111-vglxwabhbr

  • MD5

    bfb5eeddc4ff027d1edcbb75a09554dd

  • SHA1

    7f74bd52d4b383abe41e6af26fd6daec1fb8f2de

  • SHA256

    436ca44f08989125b66fdee64549e1273403f0d368f4ac7bc7d419eacacf3cf3

  • SHA512

    e27f0162c64b747b37240b98fc6d04fe165331c2c1aaa8a69e299a990e9690ad774a748c0ea7a12d63d4153b1224d7206c3daa61969080bad0db9626a9470383

  • SSDEEP

    6144:PZQvytpliMp5CPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSpaH8m34:PZQvytplxFHRFbeE8mo

Score
10/10
persistence

Malware Config

Targets

    • Target

      bfb5eeddc4ff027d1edcbb75a09554dd.exe

    • Size

      303KB

    • MD5

      bfb5eeddc4ff027d1edcbb75a09554dd

    • SHA1

      7f74bd52d4b383abe41e6af26fd6daec1fb8f2de

    • SHA256

      436ca44f08989125b66fdee64549e1273403f0d368f4ac7bc7d419eacacf3cf3

    • SHA512

      e27f0162c64b747b37240b98fc6d04fe165331c2c1aaa8a69e299a990e9690ad774a748c0ea7a12d63d4153b1224d7206c3daa61969080bad0db9626a9470383

    • SSDEEP

      6144:PZQvytpliMp5CPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSpaH8m34:PZQvytplxFHRFbeE8mo

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks