Overview

overview

10

Static

static

10

b2fb7c0eec...f4.exe

windows7-x64

10

b2fb7c0eec...f4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b2fb7c0eec4de1fc96e9b57c7ed9191a311e3c04d415f9ed3a9cea87594358f4

  • Size

    176KB

  • Sample

    240307-3hh7daab4y

  • MD5

    2ef9932f1c609b85e0ac364252790c3f

  • SHA1

    b6d8e52cf998dcd4ddb45d09e6e9c7b674b5976e

  • SHA256

    b2fb7c0eec4de1fc96e9b57c7ed9191a311e3c04d415f9ed3a9cea87594358f4

  • SHA512

    ed477a30e7a8cb6fe76ff8ff3a753f152c986a399045896a6fd3e607dc7e5961d9f7ff5081fbd78a6ae7dd2947f4229043d61d4f7225435f206861b9add24de1

  • SSDEEP

    3072:fnvvRspepxpSarlOGA8d2E2fAYjmjRrz3E3:fn3RspcxpSRXE2fAEG4

Score
10/10
persistence

Malware Config

Targets

    • Target

      b2fb7c0eec4de1fc96e9b57c7ed9191a311e3c04d415f9ed3a9cea87594358f4

    • Size

      176KB

    • MD5

      2ef9932f1c609b85e0ac364252790c3f

    • SHA1

      b6d8e52cf998dcd4ddb45d09e6e9c7b674b5976e

    • SHA256

      b2fb7c0eec4de1fc96e9b57c7ed9191a311e3c04d415f9ed3a9cea87594358f4

    • SHA512

      ed477a30e7a8cb6fe76ff8ff3a753f152c986a399045896a6fd3e607dc7e5961d9f7ff5081fbd78a6ae7dd2947f4229043d61d4f7225435f206861b9add24de1

    • SSDEEP

      3072:fnvvRspepxpSarlOGA8d2E2fAYjmjRrz3E3:fn3RspcxpSRXE2fAEG4

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks