Overview

overview

10

Static

static

3

bc58f0f253...89.exe

windows7-x64

10

bc58f0f253...89.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc58f0f253d6c5b7d170add9dcdb9489

  • Size

    622KB

  • Sample

    240309-vmxassde3z

  • MD5

    bc58f0f253d6c5b7d170add9dcdb9489

  • SHA1

    5b668a12e334c0a02462c053af8d2ce956079657

  • SHA256

    bc606aed94d787f0f3af8277c4b0e5cef4b9a62e0858f0210e0b2acc3a0d1cf2

  • SHA512

    468f43bc06bb9d527592d4e8a48e0d9dec2568399c569a38df9c71048115dadc323af506835c87d211fc861a03119d5a36a6ff8b3dca66d173dd2bad0dfeec22

  • SSDEEP

    6144:UZfec9EbXDk6RkNKWnmy+g4g/UOPSe570Szp3b/UOPSe570Szp3b/UOPSe570SzA:UZWtI6RkjUOB0vOB0vOB0j

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bc58f0f253d6c5b7d170add9dcdb9489

    • Size

      622KB

    • MD5

      bc58f0f253d6c5b7d170add9dcdb9489

    • SHA1

      5b668a12e334c0a02462c053af8d2ce956079657

    • SHA256

      bc606aed94d787f0f3af8277c4b0e5cef4b9a62e0858f0210e0b2acc3a0d1cf2

    • SHA512

      468f43bc06bb9d527592d4e8a48e0d9dec2568399c569a38df9c71048115dadc323af506835c87d211fc861a03119d5a36a6ff8b3dca66d173dd2bad0dfeec22

    • SSDEEP

      6144:UZfec9EbXDk6RkNKWnmy+g4g/UOPSe570Szp3b/UOPSe570Szp3b/UOPSe570SzA:UZWtI6RkjUOB0vOB0vOB0j

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks