Overview

overview

10

Static

static

10

5e3480a902...a7.exe

windows7-x64

10

5e3480a902...a7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e3480a9020a1130bc382ec94a5920981e2f2312a3fd6f22e14176031e78c9a7

  • Size

    430KB

  • Sample

    240314-yrllmsdf6s

  • MD5

    a94c54b5ea8574cdfbc8443a81e7de43

  • SHA1

    51a3b462be2587a026b17f58c19a4c9f04cf775e

  • SHA256

    5e3480a9020a1130bc382ec94a5920981e2f2312a3fd6f22e14176031e78c9a7

  • SHA512

    b93d0c9f3f0a4a73a10c3d6cc675e27fb3e2409d7fba9babbe240909650413b5d0d0579c79ad511c8d2ce8061452cc237092a3c7dd605a285f5b25cb9b36fdce

  • SSDEEP

    3072:wthI/YWdxeOooTkt6qVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWsnzj:wC+y4AqRs+HLlD0rN2ZwVht740Psz

Score
10/10
persistence

Malware Config

Targets

    • Target

      5e3480a9020a1130bc382ec94a5920981e2f2312a3fd6f22e14176031e78c9a7

    • Size

      430KB

    • MD5

      a94c54b5ea8574cdfbc8443a81e7de43

    • SHA1

      51a3b462be2587a026b17f58c19a4c9f04cf775e

    • SHA256

      5e3480a9020a1130bc382ec94a5920981e2f2312a3fd6f22e14176031e78c9a7

    • SHA512

      b93d0c9f3f0a4a73a10c3d6cc675e27fb3e2409d7fba9babbe240909650413b5d0d0579c79ad511c8d2ce8061452cc237092a3c7dd605a285f5b25cb9b36fdce

    • SSDEEP

      3072:wthI/YWdxeOooTkt6qVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWsnzj:wC+y4AqRs+HLlD0rN2ZwVht740Psz

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks