e9934abfdede625607cf46cbf7afe5dcab892e94117ab3bf827dafcf6be5eef1

Sharing

Copy URL Twitter E-mail

General

Target
Halkbank_Ekstre_06535798_98742134.pdf.exe
Size 390KB
Sample240302-v2jy1sfd7s
SHA256 e9934abfdede625607cf46cbf7afe5dcab892e94117ab3bf827dafcf6be5eef1
MD5 fab1a85cc591e331c88a91457bd276db
SHA1 4721519277e638cdd2de9269a297bbc9bb3a9144
SHA512 acf68f6b485fd8764a03d959b53d499d4ab78726ef462f5e9ae1a482ebc91ba6e409bb3d64a81fad3b8360d36272b45cce3f3d4160134c67986e111b801b45b9
SSDEEP 12288:hy/1MfPsGJOIdh3G8jr1LD0YoRmwU2mq:hy/23pJ5CIJLvoLUP
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

persistence

Malware Config

Targets

- Target
  Halkbank_Ekstre_06535798_98742134.pdf.exe
- Size 390KB
- SHA256 e9934abfdede625607cf46cbf7afe5dcab892e94117ab3bf827dafcf6be5eef1
- MD5 fab1a85cc591e331c88a91457bd276db
- SHA1 4721519277e638cdd2de9269a297bbc9bb3a9144
- SHA512 acf68f6b485fd8764a03d959b53d499d4ab78726ef462f5e9ae1a482ebc91ba6e409bb3d64a81fad3b8360d36272b45cce3f3d4160134c67986e111b801b45b9
- SSDEEP 12288:hy/1MfPsGJOIdh3G8jr1LD0YoRmwU2mq:hy/23pJ5CIJLvoLUP
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/BgImage.dll
- Size 7KB
- SHA256 d0607e535ff5573638ee1d70612e2239d5cb3c87307f48cfd57aa1c5cc0d9524
- MD5 24db082241ace4aca15bdf1e8460c92b
- SHA1 d317ef130af6ea6a72a958eee20a58568d38f23d
- SHA512 ec1dcf17e2e72dbdf06d91250f0698cd50144836a1ee4a3e8a50605e27f8106db595c61a81349a72ce652bc03aee0033fed1700d87d8f2d0e4cd1db9515e7ee2
- SSDEEP 96:8eD0AKTIfv7QCUsthvNL85s4lk38Eb3CDfvEh8uLzqkznLiEQjJ3KxkP:tZBfjbUA/85q3wEh8uLmaLpmP
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 c2c88e4a32c734b0cb4ae507c1a9a1b417a2375079111fb1b35fab23aedd41d9
- MD5 b38561661a7164e3bbb04edc3718fe89
- SHA1 f13c873c8db121ba21244b1e9a457204360d543f
- SHA512 fedcaac20722de3519382011ccf22314af3edcd11b69f814db14710966853b69b9b5fc98383edcdb64d050ff825264eaba27b1c5adfe61d1fc9d77f13a052ced
- SSDEEP 96:f7GUxNkO6GR0t9GKKr1Zd8NHYVVHp4dEeY3kRnHdMqqyVgNPS3e:zXhHR0aTQN4gRHdMqJVgNPR
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  Reify/Hyperuresis/Comme/Deemed/Imboldened.Aco
- Size 47KB
- SHA256 f2727229ceb7421438a43352b489c9c67159dc4323b2b250cfdfcc580ff21499
- MD5 e67e2099ba78be4c23c7efeb04b6fd6e
- SHA1 a665d6aef9c6447b14fcf964928e03fc86fad3e4
- SHA512 318d19d1f9aabc20ea194569b04fbfbe6638d76b771befb200f32e494097b983295589e603b2d529f7af9201a184af758b02fc56f43193c96c358ba8cb9804bf
- SSDEEP 768:J+nOdbZkAXat8TS9u35DqVyM0u+Pg2Q06Gor+QBBIjA7Yu5hia/5c6Ewc7oOa:J1d7RTS25DqkM09HQ06ZtrBYPW5cNwck
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Modifies Installed Components in the registry

Enumerates connected drives

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8