Overview

overview

10

Static

static

3

b9677be932...e4.exe

windows7-x64

10

b9677be932...e4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9677be932d8c91f5518d6c45c1f21e4

  • Size

    148KB

  • Sample

    240307-xcbx8aag79

  • MD5

    b9677be932d8c91f5518d6c45c1f21e4

  • SHA1

    763170e1e9ec9ca356c2a1bb96f3dc53021967a0

  • SHA256

    4cc54c7f3d92ff0942437b5522a2f710cd8e6ad59cfbc13cc9802f6dce998e1a

  • SHA512

    b017c43b7e6ad0b88f56e5bdd4a600e57a6714e8032edca229ff6ffeef64451592048031a658256908ff61a089b02c905db9a178145002ede74e8534b6b32527

  • SSDEEP

    1536:OHQ9HTJKqOeOgrfnc6jHTJKqOtCUg7zRkevioOaJKd2:hTJK52rU8TJK5tg7NkMiraJKd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b9677be932d8c91f5518d6c45c1f21e4

    • Size

      148KB

    • MD5

      b9677be932d8c91f5518d6c45c1f21e4

    • SHA1

      763170e1e9ec9ca356c2a1bb96f3dc53021967a0

    • SHA256

      4cc54c7f3d92ff0942437b5522a2f710cd8e6ad59cfbc13cc9802f6dce998e1a

    • SHA512

      b017c43b7e6ad0b88f56e5bdd4a600e57a6714e8032edca229ff6ffeef64451592048031a658256908ff61a089b02c905db9a178145002ede74e8534b6b32527

    • SSDEEP

      1536:OHQ9HTJKqOeOgrfnc6jHTJKqOtCUg7zRkevioOaJKd2:hTJK52rU8TJK5tg7NkMiraJKd

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks