Overview

overview

10

Static

static

3

65c1431652...ca.exe

windows7-x64

10

65c1431652...ca.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65c1431652a7102cae0bd94d05152f7e0a0f8f8fd798d38208e60c0ab8cfffca

  • Size

    292KB

  • Sample

    240312-z6psaada67

  • MD5

    2583b80bc9c9771000b55ac14a44ba5b

  • SHA1

    41161fbb39ef320f0770c3440a0ecb183a194605

  • SHA256

    65c1431652a7102cae0bd94d05152f7e0a0f8f8fd798d38208e60c0ab8cfffca

  • SHA512

    c60996972682ebb2eb77fbdfdbd7acc92335b2faa2fc352a9992b14e9f69eb91b077a54c5d0e8dafa01b521b09604e11c526fe71dedd6343212e91fc97a58380

  • SSDEEP

    3072:Fbluj2AgK1S4lQ/qml80FqCKmgTRHGvcqRI0NU/iYyA8Qv:Fbl5RKgOGqml80FrgTRHGvJI08iYiQv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      65c1431652a7102cae0bd94d05152f7e0a0f8f8fd798d38208e60c0ab8cfffca

    • Size

      292KB

    • MD5

      2583b80bc9c9771000b55ac14a44ba5b

    • SHA1

      41161fbb39ef320f0770c3440a0ecb183a194605

    • SHA256

      65c1431652a7102cae0bd94d05152f7e0a0f8f8fd798d38208e60c0ab8cfffca

    • SHA512

      c60996972682ebb2eb77fbdfdbd7acc92335b2faa2fc352a9992b14e9f69eb91b077a54c5d0e8dafa01b521b09604e11c526fe71dedd6343212e91fc97a58380

    • SSDEEP

      3072:Fbluj2AgK1S4lQ/qml80FqCKmgTRHGvcqRI0NU/iYyA8Qv:Fbl5RKgOGqml80FrgTRHGvJI08iYiQv

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks