Overview

overview

8

Static

static

1

9c5ec06ffd...3c.exe

windows7-x64

8

9c5ec06ffd...3c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9c5ec06ffdc7e7d4896f5b9a559bc83c

  • Size

    65KB

  • Sample

    240214-xc5wasah78

  • MD5

    9c5ec06ffdc7e7d4896f5b9a559bc83c

  • SHA1

    5d787f59e038b9383fe0d682b2d64e2250240f59

  • SHA256

    5b2823ce394f313bc25e94f7de59c0b5384fdc56633cc98d35d17ff03fcf9c4d

  • SHA512

    4750ee076d44e0d2beec6de1d5415834cfdc51775599e66cf0529da48fb98a87a2e79c383e818dc8f5e872c27472d9781e479e74573004dc71d0e137411d1a12

  • SSDEEP

    384:X1yfWTXiEH0jqjaCInxm38Y5SPfhPnR8+7wjOb04sf:lywD0jqj9Ixm3FSmZx

Score
8/10
persistence

Malware Config

Targets

    • Target

      9c5ec06ffdc7e7d4896f5b9a559bc83c

    • Size

      65KB

    • MD5

      9c5ec06ffdc7e7d4896f5b9a559bc83c

    • SHA1

      5d787f59e038b9383fe0d682b2d64e2250240f59

    • SHA256

      5b2823ce394f313bc25e94f7de59c0b5384fdc56633cc98d35d17ff03fcf9c4d

    • SHA512

      4750ee076d44e0d2beec6de1d5415834cfdc51775599e66cf0529da48fb98a87a2e79c383e818dc8f5e872c27472d9781e479e74573004dc71d0e137411d1a12

    • SSDEEP

      384:X1yfWTXiEH0jqjaCInxm38Y5SPfhPnR8+7wjOb04sf:lywD0jqj9Ixm3FSmZx

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Deletes itself

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks