Overview

overview

10

Static

static

3

79c22a2c9c...91.exe

windows7-x64

10

79c22a2c9c...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79c22a2c9c050e635e1e18c48ff7d977f399f6de1b8725875a544f6e8b404591

  • Size

    206KB

  • Sample

    240311-24vxmaha8z

  • MD5

    1e68f62987bf5fde1b43f628843c300c

  • SHA1

    b9c7d3b91e1ee7ce0bd492ea37f165d9195c4f44

  • SHA256

    79c22a2c9c050e635e1e18c48ff7d977f399f6de1b8725875a544f6e8b404591

  • SHA512

    e75e77695752082ed1aa8bc9949a1a76061bf9dd500b521dde6ede8a64eda41fe9f8a3b15b394e71cbba13df85589e29055fa69328d3209b35f69d5638879469

  • SSDEEP

    3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unr:zvEN2U+T6i5LirrllHy4HUcMQY6k

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      79c22a2c9c050e635e1e18c48ff7d977f399f6de1b8725875a544f6e8b404591

    • Size

      206KB

    • MD5

      1e68f62987bf5fde1b43f628843c300c

    • SHA1

      b9c7d3b91e1ee7ce0bd492ea37f165d9195c4f44

    • SHA256

      79c22a2c9c050e635e1e18c48ff7d977f399f6de1b8725875a544f6e8b404591

    • SHA512

      e75e77695752082ed1aa8bc9949a1a76061bf9dd500b521dde6ede8a64eda41fe9f8a3b15b394e71cbba13df85589e29055fa69328d3209b35f69d5638879469

    • SSDEEP

      3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unr:zvEN2U+T6i5LirrllHy4HUcMQY6k

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks