Overview

overview

10

Static

static

3

silence-workspace.exe

windows10-1703-x64

10

silence-workspace.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    silence-workspace.exe

  • Size

    1.7MB

  • Sample

    240329-bhfygaeb24

  • MD5

    0e1840622eede2693a3736ba54ddbd60

  • SHA1

    623af4769755c4590d2cc28f63ddf5fe0f4721d0

  • SHA256

    e1c330fc423ad482ea8d1b3a4547b03280f8c58248ae71d357b8fbd9b2898732

  • SHA512

    129c473b5549d5ba7e8c0a7a589b1f81e86a0186e122b991158f14c9a3bc9da51df58d970d867075a49083b67e56389d18a2b1d7d22f3cc2743bd1c708944c74

  • SSDEEP

    49152:tpMjY6t4MyINrk7vg7mploLq2boUGXM0b:XivyINrQgMz

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      silence-workspace.exe

    • Size

      1.7MB

    • MD5

      0e1840622eede2693a3736ba54ddbd60

    • SHA1

      623af4769755c4590d2cc28f63ddf5fe0f4721d0

    • SHA256

      e1c330fc423ad482ea8d1b3a4547b03280f8c58248ae71d357b8fbd9b2898732

    • SHA512

      129c473b5549d5ba7e8c0a7a589b1f81e86a0186e122b991158f14c9a3bc9da51df58d970d867075a49083b67e56389d18a2b1d7d22f3cc2743bd1c708944c74

    • SSDEEP

      49152:tpMjY6t4MyINrk7vg7mploLq2boUGXM0b:XivyINrQgMz

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks