Overview

overview

8

Static

static

3

6fb90ec3ba...ae.exe

windows7-x64

8

6fb90ec3ba...ae.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    6fb90ec3bab4503c587341002887b4ae

  • Size

    4.1MB

  • Sample

    240122-sch93shchp

  • MD5

    6fb90ec3bab4503c587341002887b4ae

  • SHA1

    3ece7e382f513d87161ca43623c2ab266fa0a4a7

  • SHA256

    4e0055633f61b8a542def3c5c6e4e2852f59d1e904f4ba809b6be636a9dabd43

  • SHA512

    2e0fc84425082477d7ee05e31ca02af5cc599a375183780fab4980d2b64c68b91bcee4f23e64feeff04465fb726604883801dc15746b7ea675716bbff4951de4

  • SSDEEP

    98304:4KASdkmQY5hB1uvxGr6o6PFUDaLaAq00zpZev7uiWnxXbunFaRTR4zh3LPw3x4:9KmQUhvug6dFUD9T00uv7uiWn5YFgTOp

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      6fb90ec3bab4503c587341002887b4ae

    • Size

      4.1MB

    • MD5

      6fb90ec3bab4503c587341002887b4ae

    • SHA1

      3ece7e382f513d87161ca43623c2ab266fa0a4a7

    • SHA256

      4e0055633f61b8a542def3c5c6e4e2852f59d1e904f4ba809b6be636a9dabd43

    • SHA512

      2e0fc84425082477d7ee05e31ca02af5cc599a375183780fab4980d2b64c68b91bcee4f23e64feeff04465fb726604883801dc15746b7ea675716bbff4951de4

    • SSDEEP

      98304:4KASdkmQY5hB1uvxGr6o6PFUDaLaAq00zpZev7uiWnxXbunFaRTR4zh3LPw3x4:9KmQUhvug6dFUD9T00uv7uiWn5YFgTOp

    Score
    8/10
    evasionpersistence

    • Stops running service(s)

      evasion

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks