Overview

overview

10

Static

static

3

e18531f59b...67.exe

windows7-x64

10

e18531f59b...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e18531f59bee22f4dfad9d061983de67

  • Size

    1.3MB

  • Sample

    240327-m9tt7adh9y

  • MD5

    e18531f59bee22f4dfad9d061983de67

  • SHA1

    cd992b1e99bc1e9b0f4efc83d9d2d7d872b6ebd6

  • SHA256

    dd968353cfa5c660dd958d26251d014f4c497cc420b64ccf8f1c61e504ccd820

  • SHA512

    cf0e83c9cef4a6b06963b1897e78c99b354264b8c0964d8fe1eff141671e4222dc1aba79af54732efdeeb5969c04cee7c9e0bc5ccaeed4cb8e32a17b7f11f07e

  • SSDEEP

    24576:UuhaRerQZb+md4wmWOberQZb+md4wmWOGu:bserQZbd2PerQZbd2au

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e18531f59bee22f4dfad9d061983de67

    • Size

      1.3MB

    • MD5

      e18531f59bee22f4dfad9d061983de67

    • SHA1

      cd992b1e99bc1e9b0f4efc83d9d2d7d872b6ebd6

    • SHA256

      dd968353cfa5c660dd958d26251d014f4c497cc420b64ccf8f1c61e504ccd820

    • SHA512

      cf0e83c9cef4a6b06963b1897e78c99b354264b8c0964d8fe1eff141671e4222dc1aba79af54732efdeeb5969c04cee7c9e0bc5ccaeed4cb8e32a17b7f11f07e

    • SSDEEP

      24576:UuhaRerQZb+md4wmWOberQZb+md4wmWOGu:bserQZbd2PerQZbd2au

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks