Overview

overview

10

Static

static

3

89b6487513...5d.exe

windows7-x64

10

89b6487513...5d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89b648751346dba4a9089a84f801a05d

  • Size

    248KB

  • Sample

    240202-rf14maabbr

  • MD5

    89b648751346dba4a9089a84f801a05d

  • SHA1

    1ea7a06e2a0ac3d6c3391bbda697d73b52da3bab

  • SHA256

    3ab004eb94aef7dd8ae80a6619a86507f6161c6a102e1f3faa114ff3d3a2c218

  • SHA512

    3c2dbb2a8595e720262bcbccb068d7e6f5decf46a9a60eadf6d20dfa6161dfc12992e2d1701f105577e31a18c8c979d1b61067ab327db915382e308fd3c8359d

  • SSDEEP

    6144:SdPKzhTpU9R4cOqjlQuIm3U2gTrNZgJumX2G:sKzhTWkc1lQnTuumX2G

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      89b648751346dba4a9089a84f801a05d

    • Size

      248KB

    • MD5

      89b648751346dba4a9089a84f801a05d

    • SHA1

      1ea7a06e2a0ac3d6c3391bbda697d73b52da3bab

    • SHA256

      3ab004eb94aef7dd8ae80a6619a86507f6161c6a102e1f3faa114ff3d3a2c218

    • SHA512

      3c2dbb2a8595e720262bcbccb068d7e6f5decf46a9a60eadf6d20dfa6161dfc12992e2d1701f105577e31a18c8c979d1b61067ab327db915382e308fd3c8359d

    • SSDEEP

      6144:SdPKzhTpU9R4cOqjlQuIm3U2gTrNZgJumX2G:sKzhTWkc1lQnTuumX2G

    Score
    10/10
    persistencediscovery

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks