Overview

overview

10

Static

static

10

601bfe89ae...66.exe

windows7-x64

10

601bfe89ae...66.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    601bfe89ae9303a9e9eb14d4df72a8cf20a74ee86429b51047395ad226b71566

  • Size

    259KB

  • Sample

    240312-zw2n4ach45

  • MD5

    ead9a558d1adb0aef53183c1a0e9f7da

  • SHA1

    393cb47e288bbd7232c03e35b37f1fbe23a99ee5

  • SHA256

    601bfe89ae9303a9e9eb14d4df72a8cf20a74ee86429b51047395ad226b71566

  • SHA512

    673859775e7013c3204c769d8e034a1671136a48bfe1a5cea7c34aeee5e77ef80b1d04674cce5c030ff60150d1a5772c00d14fdc853e4527ab75fc802fe7e9b7

  • SSDEEP

    3072:Omucd1J9IDlRxyhTbhgu+tAcrzkAqSxYIhOmTsF93UYfwC6GIoutz5yLp:Xd1sDshsrYIcm4FmowdHoSa

Score
10/10
persistence

Malware Config

Targets

    • Target

      601bfe89ae9303a9e9eb14d4df72a8cf20a74ee86429b51047395ad226b71566

    • Size

      259KB

    • MD5

      ead9a558d1adb0aef53183c1a0e9f7da

    • SHA1

      393cb47e288bbd7232c03e35b37f1fbe23a99ee5

    • SHA256

      601bfe89ae9303a9e9eb14d4df72a8cf20a74ee86429b51047395ad226b71566

    • SHA512

      673859775e7013c3204c769d8e034a1671136a48bfe1a5cea7c34aeee5e77ef80b1d04674cce5c030ff60150d1a5772c00d14fdc853e4527ab75fc802fe7e9b7

    • SSDEEP

      3072:Omucd1J9IDlRxyhTbhgu+tAcrzkAqSxYIhOmTsF93UYfwC6GIoutz5yLp:Xd1sDshsrYIcm4FmowdHoSa

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks