Overview

overview

10

Static

static

3

48e65b6121...9b.exe

windows7-x64

10

48e65b6121...9b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    48e65b6121275138a1468585da88c71ddf581d1a154ea7623e0a64e95f10719b

  • Size

    390KB

  • Sample

    240325-xcnl1sff35

  • MD5

    eb71c5c200e5968b7df3dabece56ac5c

  • SHA1

    654993be57f0c6a56b6a4dc368c9dcccf195655d

  • SHA256

    48e65b6121275138a1468585da88c71ddf581d1a154ea7623e0a64e95f10719b

  • SHA512

    fa1371aa48d7f027364dbbb16582a99086f0343ca4fccb58380d4a7a9b6e0ccc3636e134067f3b963137def0be6b1cfd2e006aad9578be0393d5fb31cdd55ed9

  • SSDEEP

    6144:uGHbfGbfynz66b+X0RjtdgOPAUvgkNRgdgOPAUvgkG:u+ubfymUngEiM2gEif

Score
10/10
persistence

Malware Config

Targets

    • Target

      48e65b6121275138a1468585da88c71ddf581d1a154ea7623e0a64e95f10719b

    • Size

      390KB

    • MD5

      eb71c5c200e5968b7df3dabece56ac5c

    • SHA1

      654993be57f0c6a56b6a4dc368c9dcccf195655d

    • SHA256

      48e65b6121275138a1468585da88c71ddf581d1a154ea7623e0a64e95f10719b

    • SHA512

      fa1371aa48d7f027364dbbb16582a99086f0343ca4fccb58380d4a7a9b6e0ccc3636e134067f3b963137def0be6b1cfd2e006aad9578be0393d5fb31cdd55ed9

    • SSDEEP

      6144:uGHbfGbfynz66b+X0RjtdgOPAUvgkNRgdgOPAUvgkG:u+ubfymUngEiM2gEif

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Detects executables containing bas64 encoded gzip files

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks