Overview

overview

10

Static

static

10

ebfc328a1c...a8.exe

windows7-x64

9

ebfc328a1c...a8.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    ebfc328a1ccee1f7035d43ab4948f4f9bfef02c5d2b328c0df80f8203bf417a8

  • Size

    616KB

  • Sample

    240327-b8hvrahf59

  • MD5

    ea3da0c95ee2e9ef3a7e9db4433dd78a

  • SHA1

    0b08c605684208be75e58a5199c20e001bdb8676

  • SHA256

    ebfc328a1ccee1f7035d43ab4948f4f9bfef02c5d2b328c0df80f8203bf417a8

  • SHA512

    c70f97a4777f16c9561c285f46cbe37ac078d80aba82488ffe77cd09f895046741e48e34a493d18a3824710f975d177bc089b6513193d2f6e5c54ef5d999a47e

  • SSDEEP

    12288:wlbd+Baplw9U+qMi8CtdVldusIh6BBHCHrKZXCktSzIzWpX5y:Wbd+oYTqMi8CtBd2QHCHmTBW5y

Score
10/10
persistence

Malware Config

Targets

    • Target

      ebfc328a1ccee1f7035d43ab4948f4f9bfef02c5d2b328c0df80f8203bf417a8

    • Size

      616KB

    • MD5

      ea3da0c95ee2e9ef3a7e9db4433dd78a

    • SHA1

      0b08c605684208be75e58a5199c20e001bdb8676

    • SHA256

      ebfc328a1ccee1f7035d43ab4948f4f9bfef02c5d2b328c0df80f8203bf417a8

    • SHA512

      c70f97a4777f16c9561c285f46cbe37ac078d80aba82488ffe77cd09f895046741e48e34a493d18a3824710f975d177bc089b6513193d2f6e5c54ef5d999a47e

    • SSDEEP

      12288:wlbd+Baplw9U+qMi8CtdVldusIh6BBHCHrKZXCktSzIzWpX5y:Wbd+oYTqMi8CtBd2QHCHmTBW5y

    Score
    9/10
    persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks