Overview

overview

10

Static

static

3

67d367bc9e...eb.exe

windows7-x64

10

67d367bc9e...eb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    67d367bc9ee39808f43c49bc10a824eb

  • Size

    29KB

  • Sample

    240119-rj2vbsfeen

  • MD5

    67d367bc9ee39808f43c49bc10a824eb

  • SHA1

    e0f5722eb1f145a6faccd4186fcdb529b6373388

  • SHA256

    0dc1858d8a83eb6cd4fb768d330b3d5872315db5c4a8486983eb64093c3df314

  • SHA512

    b052b179d3a9fd5c7ff9366b9ae7f7e2391c9901299057677e593df20950ac02c107132ec986aeffef0322f0085e9af51dfcd2314dfec2c2ba5bfd2a23095a51

  • SSDEEP

    384:TG7qKuhKZUPX27xYiVY5XUIgNrMBz5aJGOHn1YynPCn+brkOM3kdKG:TGDuiVY5X4rMBz4GOHn1YyPCn+cZkcG

Score
10/10
persistence

Malware Config

Extracted

Credentials

  • Protocol:     ftp
  • Host:
    ftp.webzdarma.cz
  • Port:
    21
  • Username:
    00000004.webzdarma.cz
  • Password:
    44440000

Targets

    • Target

      67d367bc9ee39808f43c49bc10a824eb

    • Size

      29KB

    • MD5

      67d367bc9ee39808f43c49bc10a824eb

    • SHA1

      e0f5722eb1f145a6faccd4186fcdb529b6373388

    • SHA256

      0dc1858d8a83eb6cd4fb768d330b3d5872315db5c4a8486983eb64093c3df314

    • SHA512

      b052b179d3a9fd5c7ff9366b9ae7f7e2391c9901299057677e593df20950ac02c107132ec986aeffef0322f0085e9af51dfcd2314dfec2c2ba5bfd2a23095a51

    • SSDEEP

      384:TG7qKuhKZUPX27xYiVY5XUIgNrMBz5aJGOHn1YynPCn+brkOM3kdKG:TGDuiVY5X4rMBz4GOHn1YyPCn+cZkcG

    Score
    10/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks