Overview

overview

10

Static

static

3

9f7a5a89d4...36.exe

windows7-x64

10

9f7a5a89d4...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f7a5a89d4cb6352021f36fc0467208fb8179c59327253886d3277625b7da136

  • Size

    461KB

  • Sample

    240319-23qaraaa62

  • MD5

    ef9735138157ae6c0d84832eb582f4da

  • SHA1

    0219235aee14b31aabde6ca136c288a427b63cd2

  • SHA256

    9f7a5a89d4cb6352021f36fc0467208fb8179c59327253886d3277625b7da136

  • SHA512

    2623a8269b8bbf98f8bf7496f5ad94acff677b1eb886718657acedae6ea6edda6c6c783c3dee8b5d4976b3237923a8cf16f23afd89d5f7071db1e27127bd1376

  • SSDEEP

    6144:AnpAyPEM8NQDVi3ULUgNQPi3UPUgNQViEUjUgN:An5EiUJ

Score
10/10
persistence

Malware Config

Targets

    • Target

      9f7a5a89d4cb6352021f36fc0467208fb8179c59327253886d3277625b7da136

    • Size

      461KB

    • MD5

      ef9735138157ae6c0d84832eb582f4da

    • SHA1

      0219235aee14b31aabde6ca136c288a427b63cd2

    • SHA256

      9f7a5a89d4cb6352021f36fc0467208fb8179c59327253886d3277625b7da136

    • SHA512

      2623a8269b8bbf98f8bf7496f5ad94acff677b1eb886718657acedae6ea6edda6c6c783c3dee8b5d4976b3237923a8cf16f23afd89d5f7071db1e27127bd1376

    • SSDEEP

      6144:AnpAyPEM8NQDVi3ULUgNQPi3UPUgNQViEUjUgN:An5EiUJ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Detects executables containing bas64 encoded gzip files

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks