Overview

overview

10

Static

static

10

343fccd769...84.exe

windows7-x64

10

343fccd769...84.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    343fccd769319a772eafc6ab99b0f24a84127d086cbf4ce29a08014542d66484

  • Size

    430KB

  • Sample

    240305-xyftaseg31

  • MD5

    d9c59ec2ac39b090ae098a5398a9d204

  • SHA1

    7fd7b7e395ed123afa6491a1b6cff5df58dd1971

  • SHA256

    343fccd769319a772eafc6ab99b0f24a84127d086cbf4ce29a08014542d66484

  • SHA512

    86b6b22aec38674d5714296b9020c7807dca3d05fb7a96bea8cfe402f2b510ccbc36f4bac0f3a893eb19a32f25154bc6f10e4b3758f054186e6992c0bf6d1811

  • SSDEEP

    3072:P+7RRSq1vYqBVrVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWsnzj:PmRS8vY0rRs+HLlD0rN2ZwVht740Psz

Score
10/10
persistence

Malware Config

Targets

    • Target

      343fccd769319a772eafc6ab99b0f24a84127d086cbf4ce29a08014542d66484

    • Size

      430KB

    • MD5

      d9c59ec2ac39b090ae098a5398a9d204

    • SHA1

      7fd7b7e395ed123afa6491a1b6cff5df58dd1971

    • SHA256

      343fccd769319a772eafc6ab99b0f24a84127d086cbf4ce29a08014542d66484

    • SHA512

      86b6b22aec38674d5714296b9020c7807dca3d05fb7a96bea8cfe402f2b510ccbc36f4bac0f3a893eb19a32f25154bc6f10e4b3758f054186e6992c0bf6d1811

    • SSDEEP

      3072:P+7RRSq1vYqBVrVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWsnzj:PmRS8vY0rRs+HLlD0rN2ZwVht740Psz

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks