Overview

overview

8

Static

static

1

.html

windows7-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    .

  • Size

    17KB

  • Sample

    240204-b5l31aefc3

  • MD5

    2f67287300d37563801514f75bc4dc55

  • SHA1

    74b91b23a331d8ee4c14453c544244d65e0d64bf

  • SHA256

    af1b9407d71f7465b4fd33c3642d08777578e85e906dcdcf8955be0ac6f59f69

  • SHA512

    3653ffdccdbedf64237f1f164ab8a28365a423e988c0cefe0c32701a8dd0ab75f70e2301ce1506d033c8970962deb631f64d565152b348c44697ab608ca8fb23

  • SSDEEP

    384:rTWOTzDpmReVoOs41N9ylKeGMiUhHhhb1J9Y71N2wecnVJCBXQL:rC8zBVoOs41ryI1MFBhbNWigJQQL

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      .

    • Size

      17KB

    • MD5

      2f67287300d37563801514f75bc4dc55

    • SHA1

      74b91b23a331d8ee4c14453c544244d65e0d64bf

    • SHA256

      af1b9407d71f7465b4fd33c3642d08777578e85e906dcdcf8955be0ac6f59f69

    • SHA512

      3653ffdccdbedf64237f1f164ab8a28365a423e988c0cefe0c32701a8dd0ab75f70e2301ce1506d033c8970962deb631f64d565152b348c44697ab608ca8fb23

    • SSDEEP

      384:rTWOTzDpmReVoOs41N9ylKeGMiUhHhhb1J9Y71N2wecnVJCBXQL:rC8zBVoOs41ryI1MFBhbNWigJQQL

    Score
    8/10
    discoverypersistence

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks