Overview

overview

7

Static

static

3

8350d88b13...48.exe

windows7-x64

7

8350d88b13...48.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8350d88b13b3e49ead53f6734a14f7c3956a952422acabb643e93bcb7e373848

  • Size

    127KB

  • Sample

    240125-mk56xsdhe2

  • MD5

    f811d6765b8b1e8ddb14fe3ba2e6d25e

  • SHA1

    1e4f196de92759008ef46d16f883408e3d13ec07

  • SHA256

    8350d88b13b3e49ead53f6734a14f7c3956a952422acabb643e93bcb7e373848

  • SHA512

    73a10692ef879a0d14948d9d5e7ad5d23b74593ed9fa99652a63a01c3d248098e3ab66d6ef57bb51fed57285414226f3a0dc61bf0543d66beb652ad0db058fd0

  • SSDEEP

    3072:vOjRuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPz:vps9OKofHfHTXQLzgvnzHPowYbvrjD/O

Score
7/10
persistence

Malware Config

Targets

    • Target

      8350d88b13b3e49ead53f6734a14f7c3956a952422acabb643e93bcb7e373848

    • Size

      127KB

    • MD5

      f811d6765b8b1e8ddb14fe3ba2e6d25e

    • SHA1

      1e4f196de92759008ef46d16f883408e3d13ec07

    • SHA256

      8350d88b13b3e49ead53f6734a14f7c3956a952422acabb643e93bcb7e373848

    • SHA512

      73a10692ef879a0d14948d9d5e7ad5d23b74593ed9fa99652a63a01c3d248098e3ab66d6ef57bb51fed57285414226f3a0dc61bf0543d66beb652ad0db058fd0

    • SSDEEP

      3072:vOjRuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPz:vps9OKofHfHTXQLzgvnzHPowYbvrjD/O

    Score
    7/10
    persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks