Overview

overview

10

Static

static

3

c5ec878339...17.exe

windows7-x64

10

c5ec878339...17.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5ec87833984d7a0b9617f99f7d34517

  • Size

    1.4MB

  • Sample

    240313-p4hwvafa46

  • MD5

    c5ec87833984d7a0b9617f99f7d34517

  • SHA1

    6a0374d42f7f25e1fd2fb0fb6c0c006049fe8462

  • SHA256

    a9c9a182f8be9c68b801ca25aaf9cde5d73a8961f42ba0ad8ca17b239881f8f1

  • SHA512

    57613c96e15c5030d4264463b0813e65372d8fa1f653347cf02e149976fe879e085a4d829dd3966d807d10423395d7b0ba45affaf557b85023064c766e9bf318

  • SSDEEP

    24576:UuhaTBlOaerQZb+md4wmieZJ8NI8Ggc6AbaH8zAtRHO0Z:baerQZbd2f8GgdAbts

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c5ec87833984d7a0b9617f99f7d34517

    • Size

      1.4MB

    • MD5

      c5ec87833984d7a0b9617f99f7d34517

    • SHA1

      6a0374d42f7f25e1fd2fb0fb6c0c006049fe8462

    • SHA256

      a9c9a182f8be9c68b801ca25aaf9cde5d73a8961f42ba0ad8ca17b239881f8f1

    • SHA512

      57613c96e15c5030d4264463b0813e65372d8fa1f653347cf02e149976fe879e085a4d829dd3966d807d10423395d7b0ba45affaf557b85023064c766e9bf318

    • SSDEEP

      24576:UuhaTBlOaerQZb+md4wmieZJ8NI8Ggc6AbaH8zAtRHO0Z:baerQZbd2f8GgdAbts

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks