Overview

overview

10

Static

static

3

c63ab83524...cd.exe

windows7-x64

10

c63ab83524...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c63ab83524e0db8183fdb03c8eb13dcd

  • Size

    631KB

  • Sample

    240313-syr44sgf4v

  • MD5

    c63ab83524e0db8183fdb03c8eb13dcd

  • SHA1

    adfa162012f4cc0a8d6ba2ec264afeb7d44f54ee

  • SHA256

    f3e121de648153016f09d0cde3a459e25af8316381cd88e060d0b4ad2e84153c

  • SHA512

    45dfa202491d250038a02df23a73320d133a7c219fd072ac24ac0ec280078752f24caf5c44177e993095849f264ca599d6244ce5a36dd3d8b8f791e20356c519

  • SSDEEP

    12288:UZWtI6Rk7LureZJys73dOvXDpNjNe8TOB0vOB0H:Uuha7OeZJ8NI8TOWOM

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c63ab83524e0db8183fdb03c8eb13dcd

    • Size

      631KB

    • MD5

      c63ab83524e0db8183fdb03c8eb13dcd

    • SHA1

      adfa162012f4cc0a8d6ba2ec264afeb7d44f54ee

    • SHA256

      f3e121de648153016f09d0cde3a459e25af8316381cd88e060d0b4ad2e84153c

    • SHA512

      45dfa202491d250038a02df23a73320d133a7c219fd072ac24ac0ec280078752f24caf5c44177e993095849f264ca599d6244ce5a36dd3d8b8f791e20356c519

    • SSDEEP

      12288:UZWtI6Rk7LureZJys73dOvXDpNjNe8TOB0vOB0H:Uuha7OeZJ8NI8TOWOM

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks