Overview

overview

10

Static

static

3

abaa7b3f09...1b.exe

windows7-x64

10

abaa7b3f09...1b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    abaa7b3f0999c7d8c15cd87924771e1b

  • Size

    70KB

  • Sample

    240228-mkd3fahd73

  • MD5

    abaa7b3f0999c7d8c15cd87924771e1b

  • SHA1

    3343c993d87f43fc36fce81abeb501fd71710aac

  • SHA256

    118307b2e96fd0967f508a3165b5440ef38e3cdd4e78f6f1cf750a384286544d

  • SHA512

    43b211d42a6af3048327e254456f8cbf506afbaa507d499c8fe944471b574cc3fbe2cbdbb86e12467195e58365194725702278995f5ce5bc898321b8e8c2195d

  • SSDEEP

    768:wkr9vnLkYy3J1NmimjDLTfyIghrzVzJHHMNi+GKrJVaqp7lmr7hAhEPDP1WHx8m1:wk5nLk337uO/hV4m/hA6cCF14trlAjOf

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      abaa7b3f0999c7d8c15cd87924771e1b

    • Size

      70KB

    • MD5

      abaa7b3f0999c7d8c15cd87924771e1b

    • SHA1

      3343c993d87f43fc36fce81abeb501fd71710aac

    • SHA256

      118307b2e96fd0967f508a3165b5440ef38e3cdd4e78f6f1cf750a384286544d

    • SHA512

      43b211d42a6af3048327e254456f8cbf506afbaa507d499c8fe944471b574cc3fbe2cbdbb86e12467195e58365194725702278995f5ce5bc898321b8e8c2195d

    • SSDEEP

      768:wkr9vnLkYy3J1NmimjDLTfyIghrzVzJHHMNi+GKrJVaqp7lmr7hAhEPDP1WHx8m1:wk5nLk337uO/hV4m/hA6cCF14trlAjOf

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies firewall policy service

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks