Overview

overview

10

Static

static

10

c271b00284...33.exe

windows7-x64

10

c271b00284...33.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c271b0028408d6778dd31fd6cd5983ab05100d877bf8839afcda104c3288a533

  • Size

    448KB

  • Sample

    240310-a8khxafe93

  • MD5

    4549d9689ad171cb7d3e7b012f2c0942

  • SHA1

    98e896771493f5d371a402a6a6022efca783329d

  • SHA256

    c271b0028408d6778dd31fd6cd5983ab05100d877bf8839afcda104c3288a533

  • SHA512

    206fcea2a733383848694885efcf87a532e2f44cf887893d2b0b2f3a5ab8558aea8ac690fabf10cfb56415b5b867c79e9fb04e3417e4d7089faab19a02859f83

  • SSDEEP

    6144:PMuOBLrntZ82EY9+7xiLUmKyIxLDXXoq9FJZCUmKyIxL:YntPEY9K832XXf9Do3

Score
10/10
persistence

Malware Config

Targets

    • Target

      c271b0028408d6778dd31fd6cd5983ab05100d877bf8839afcda104c3288a533

    • Size

      448KB

    • MD5

      4549d9689ad171cb7d3e7b012f2c0942

    • SHA1

      98e896771493f5d371a402a6a6022efca783329d

    • SHA256

      c271b0028408d6778dd31fd6cd5983ab05100d877bf8839afcda104c3288a533

    • SHA512

      206fcea2a733383848694885efcf87a532e2f44cf887893d2b0b2f3a5ab8558aea8ac690fabf10cfb56415b5b867c79e9fb04e3417e4d7089faab19a02859f83

    • SSDEEP

      6144:PMuOBLrntZ82EY9+7xiLUmKyIxLDXXoq9FJZCUmKyIxL:YntPEY9K832XXf9Do3

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks