Overview

overview

10

Static

static

3

18c377906c...c6.exe

windows7-x64

10

18c377906c...c6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    18c377906c36f80926aaa8893588003488d400dfbb9aa6f583e71884be226fc6

  • Size

    3.2MB

  • Sample

    240313-wjh5fade36

  • MD5

    c0a786bb90aac87b9b844d0fb2d858ed

  • SHA1

    874aa5161b4edf83e8835e503905bf69c324e20a

  • SHA256

    18c377906c36f80926aaa8893588003488d400dfbb9aa6f583e71884be226fc6

  • SHA512

    4081ec961635b1c390e3bc6dcf6b90378732b8eb526c844888f2740ee6479fd3e2f1f299e7319f426141709f0eac7ee62565cd70bdf50660f4e6a9f69be4419f

  • SSDEEP

    98304:NlBFLPj3JStuv40ar7zrbDlsa2VIlPWYv1NT/YUugy:NlBFLPj3JStuv40ar7zrbDlsa2VIlPWH

Score
10/10
persistence

Malware Config

Targets

    • Target

      18c377906c36f80926aaa8893588003488d400dfbb9aa6f583e71884be226fc6

    • Size

      3.2MB

    • MD5

      c0a786bb90aac87b9b844d0fb2d858ed

    • SHA1

      874aa5161b4edf83e8835e503905bf69c324e20a

    • SHA256

      18c377906c36f80926aaa8893588003488d400dfbb9aa6f583e71884be226fc6

    • SHA512

      4081ec961635b1c390e3bc6dcf6b90378732b8eb526c844888f2740ee6479fd3e2f1f299e7319f426141709f0eac7ee62565cd70bdf50660f4e6a9f69be4419f

    • SSDEEP

      98304:NlBFLPj3JStuv40ar7zrbDlsa2VIlPWYv1NT/YUugy:NlBFLPj3JStuv40ar7zrbDlsa2VIlPWH

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks