Overview

overview

10

Static

static

3

ac33584eaf...3b.exe

windows7-x64

10

ac33584eaf...3b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac33584eaf6424f0e828613f1686213b

  • Size

    158KB

  • Sample

    240228-sqlblaef65

  • MD5

    ac33584eaf6424f0e828613f1686213b

  • SHA1

    30d71433361d26e036d7b51cd4c47a01b1d81bd4

  • SHA256

    c1f0eb527670a8bc2be07989ad0a51f265ad0d3f97666af5d72698de6ce0780a

  • SHA512

    5d2adb1383659ab1ce47c23447fdecfadf61087421625f0e0707ff2f195d5d3ad4fe6dac9a31d15e5233924461bf85642317ee61a968e4688d248ca384e135c3

  • SSDEEP

    3072:B6m98UYn+xsKiYH1FZOTlBAmM4Fv/T2tLw:IUYnvu1FMlBAeF36tLw

Score
10/10
evasion

Malware Config

Targets

    • Target

      ac33584eaf6424f0e828613f1686213b

    • Size

      158KB

    • MD5

      ac33584eaf6424f0e828613f1686213b

    • SHA1

      30d71433361d26e036d7b51cd4c47a01b1d81bd4

    • SHA256

      c1f0eb527670a8bc2be07989ad0a51f265ad0d3f97666af5d72698de6ce0780a

    • SHA512

      5d2adb1383659ab1ce47c23447fdecfadf61087421625f0e0707ff2f195d5d3ad4fe6dac9a31d15e5233924461bf85642317ee61a968e4688d248ca384e135c3

    • SSDEEP

      3072:B6m98UYn+xsKiYH1FZOTlBAmM4Fv/T2tLw:IUYnvu1FMlBAeF36tLw

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks