Overview

overview

10

Static

static

3

d6accec2d9...0a.exe

windows7-x64

10

d6accec2d9...0a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6accec2d9ee0e4ec7b55eb63d5be00a

  • Size

    654KB

  • Sample

    240319-vr8vdshd38

  • MD5

    d6accec2d9ee0e4ec7b55eb63d5be00a

  • SHA1

    a1e294277e55a3ec8053b5a61a53e9b2a0b96ae3

  • SHA256

    675e0b012f739b01519d04bb1cd08bff64fdd05220e3f3d3908e1a5588210b44

  • SHA512

    38b4a254e601adac9f137b5f0d01ad15fb3b16346642bd8ce7f8d031feef6fd0675862647728ddfb5ff0fe77cf0cafd385ae80d959fce3094eda270e0098039c

  • SSDEEP

    6144:UZfec9EbXDk6Rk8KkGFrQZb++tdsHP4+QfI6UsrG1VVE+IA:UZWtI6Rk+erQZb+md4w1U4ut

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d6accec2d9ee0e4ec7b55eb63d5be00a

    • Size

      654KB

    • MD5

      d6accec2d9ee0e4ec7b55eb63d5be00a

    • SHA1

      a1e294277e55a3ec8053b5a61a53e9b2a0b96ae3

    • SHA256

      675e0b012f739b01519d04bb1cd08bff64fdd05220e3f3d3908e1a5588210b44

    • SHA512

      38b4a254e601adac9f137b5f0d01ad15fb3b16346642bd8ce7f8d031feef6fd0675862647728ddfb5ff0fe77cf0cafd385ae80d959fce3094eda270e0098039c

    • SSDEEP

      6144:UZfec9EbXDk6Rk8KkGFrQZb++tdsHP4+QfI6UsrG1VVE+IA:UZWtI6Rk+erQZb+md4w1U4ut

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks