Overview

overview

10

Static

static

3

c8a5086308...49.exe

windows7-x64

10

c8a5086308...49.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8a5086308d74d3d4107ee753534c849

  • Size

    120KB

  • Sample

    240314-pxlzxsee24

  • MD5

    c8a5086308d74d3d4107ee753534c849

  • SHA1

    398117a033b264752a97dd79679a0c0481e53750

  • SHA256

    a170f5c3ed408ba0d9e247ac1fb02afa02a9a4826615d934f72b4471ebbb3b0b

  • SHA512

    ffbfd898d518719db94752715e34d4f8ef6232a2bc55cc4522be9eff67685a199efb88f011062e67c7a4d6339e88cab5e1ceea9896577644888d319124343a3c

  • SSDEEP

    1536:p5pzbvIlkSJuzhFQTn9Csr5SbyOuYIsWeAwadDDyWetats:Bzo/rfDYIsWeAeLtats

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c8a5086308d74d3d4107ee753534c849

    • Size

      120KB

    • MD5

      c8a5086308d74d3d4107ee753534c849

    • SHA1

      398117a033b264752a97dd79679a0c0481e53750

    • SHA256

      a170f5c3ed408ba0d9e247ac1fb02afa02a9a4826615d934f72b4471ebbb3b0b

    • SHA512

      ffbfd898d518719db94752715e34d4f8ef6232a2bc55cc4522be9eff67685a199efb88f011062e67c7a4d6339e88cab5e1ceea9896577644888d319124343a3c

    • SSDEEP

      1536:p5pzbvIlkSJuzhFQTn9Csr5SbyOuYIsWeAwadDDyWetats:Bzo/rfDYIsWeAeLtats

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Adds policy Run key to start application

      persistence

    • Modifies Windows Firewall

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks