Overview

overview

10

Static

static

3

f52a828ceb...a8.exe

windows7-x64

10

f52a828ceb...a8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f52a828ceb1fbf979bf65176b4f1ab7e33d7406e655e97d5aceda4b9720cbca8

  • Size

    75KB

  • Sample

    240306-c81agahc3x

  • MD5

    dfd4b1aa190a4c5bffc0b2ddc74d1f51

  • SHA1

    1879fe22395e71a17b394566f07d6b6acf3ddd16

  • SHA256

    f52a828ceb1fbf979bf65176b4f1ab7e33d7406e655e97d5aceda4b9720cbca8

  • SHA512

    8b4a946c083d40e58f9ed64d93607664b0bca8080a90667885dca03c74556ec151b0b6937d66a240384f2822fe11b121101ae0f7c05c6f6c1b913ecf65dd81ca

  • SSDEEP

    768:nzCNmuTwVO09jeYvD00FMuwdcS56Q1Nw0nyJvIp7TFSr6u5/1H5SlXdnh0M+3qEo:nGDXCEAQ1CXvMTFSr6ubY/O53q52IrFH

Score
10/10
persistence

Malware Config

Targets

    • Target

      f52a828ceb1fbf979bf65176b4f1ab7e33d7406e655e97d5aceda4b9720cbca8

    • Size

      75KB

    • MD5

      dfd4b1aa190a4c5bffc0b2ddc74d1f51

    • SHA1

      1879fe22395e71a17b394566f07d6b6acf3ddd16

    • SHA256

      f52a828ceb1fbf979bf65176b4f1ab7e33d7406e655e97d5aceda4b9720cbca8

    • SHA512

      8b4a946c083d40e58f9ed64d93607664b0bca8080a90667885dca03c74556ec151b0b6937d66a240384f2822fe11b121101ae0f7c05c6f6c1b913ecf65dd81ca

    • SSDEEP

      768:nzCNmuTwVO09jeYvD00FMuwdcS56Q1Nw0nyJvIp7TFSr6u5/1H5SlXdnh0M+3qEo:nGDXCEAQ1CXvMTFSr6ubY/O53q52IrFH

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks