Overview

overview

10

Static

static

10

84699156a3...42.exe

windows7-x64

10

84699156a3...42.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84699156a39f8258a4e337b9b14ad5f025318ea193dd5e25b4240706cc58a142

  • Size

    350KB

  • Sample

    240313-zzwbgsgh71

  • MD5

    21dbd4b2f5dc9aa4352217b3619d0273

  • SHA1

    af0bca50d6a6dac00c5c39175a4c0950213f2bcf

  • SHA256

    84699156a39f8258a4e337b9b14ad5f025318ea193dd5e25b4240706cc58a142

  • SHA512

    d4ecf015ddf713b972a4b56612bf7773fca28e1b0ac586dd0c0e43886b398a51f009156eafd816705345c9c71cbd051fd0c412a9681b604cbd33697be810f119

  • SSDEEP

    6144:J+CkOFwwwwwwW+yi9MttpHVILifyeYVDcfflXpX6LRifyeYVDc:J+vO/yi92HyefyeYCdXpXZfyeY

Score
10/10
persistence

Malware Config

Targets

    • Target

      84699156a39f8258a4e337b9b14ad5f025318ea193dd5e25b4240706cc58a142

    • Size

      350KB

    • MD5

      21dbd4b2f5dc9aa4352217b3619d0273

    • SHA1

      af0bca50d6a6dac00c5c39175a4c0950213f2bcf

    • SHA256

      84699156a39f8258a4e337b9b14ad5f025318ea193dd5e25b4240706cc58a142

    • SHA512

      d4ecf015ddf713b972a4b56612bf7773fca28e1b0ac586dd0c0e43886b398a51f009156eafd816705345c9c71cbd051fd0c412a9681b604cbd33697be810f119

    • SSDEEP

      6144:J+CkOFwwwwwwW+yi9MttpHVILifyeYVDcfflXpX6LRifyeYVDc:J+vO/yi92HyefyeYCdXpXZfyeY

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks