Overview

overview

10

Static

static

3

87e07465ac...f1.exe

windows7-x64

10

87e07465ac...f1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    87e07465ac12df0df6427797afa6f3f1

  • Size

    335KB

  • Sample

    240201-2vgnmsabhm

  • MD5

    87e07465ac12df0df6427797afa6f3f1

  • SHA1

    c38b951ac2a7905569bea30f7b67a569dc0dff5e

  • SHA256

    15ecdd54bce79d35279445d133c8569020712c4ef9a8d3536d40415bea7316a1

  • SHA512

    aeb2deb84812da7a43f4d2ed289645b293700c3748df660266096c232677595446f6a0daa4b4e66cd554279427cf895b428b3a0d5ebacbf983fadb7a52572b55

  • SSDEEP

    6144:dlDTSNsJsYtP0XVDP2j7h+dXM2DAv65gy0xBEXnXjR6k356Yr7QB:dhoitQVrTXoNx0T35tAB

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      87e07465ac12df0df6427797afa6f3f1

    • Size

      335KB

    • MD5

      87e07465ac12df0df6427797afa6f3f1

    • SHA1

      c38b951ac2a7905569bea30f7b67a569dc0dff5e

    • SHA256

      15ecdd54bce79d35279445d133c8569020712c4ef9a8d3536d40415bea7316a1

    • SHA512

      aeb2deb84812da7a43f4d2ed289645b293700c3748df660266096c232677595446f6a0daa4b4e66cd554279427cf895b428b3a0d5ebacbf983fadb7a52572b55

    • SSDEEP

      6144:dlDTSNsJsYtP0XVDP2j7h+dXM2DAv65gy0xBEXnXjR6k356Yr7QB:dhoitQVrTXoNx0T35tAB

    Score
    10/10
    persistencediscovery

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks