Overview

overview

10

Static

static

3

de52f3a1a3...34.exe

windows7-x64

10

de52f3a1a3...34.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de52f3a1a34868d16614b49da1275a559514e5dc10150f145991ade1ce544634

  • Size

    76KB

  • Sample

    240409-3smybaea5z

  • MD5

    34e05a048fbce8fa1a99022ba8e56785

  • SHA1

    eb971a48ff415aac3f7f480d03e245f4a10ae60b

  • SHA256

    de52f3a1a34868d16614b49da1275a559514e5dc10150f145991ade1ce544634

  • SHA512

    e68bd63234b2c07c0117e0cdb2ca61a42325bc1ad0711d608f8f4a57cbe0fa5b59433d89aebf6d50ecdfadd0a7e330be10a93e296694b95fef1d8f70ab8344ac

  • SSDEEP

    768:QM34MSL0OXIxDMyDRjFVZrhgFwumSCbxTGy/BBGg4NK8jhh/vn2+mRcDkUCXVBnz:74M1OX8MUu3abBGy3G8srcfJ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      de52f3a1a34868d16614b49da1275a559514e5dc10150f145991ade1ce544634

    • Size

      76KB

    • MD5

      34e05a048fbce8fa1a99022ba8e56785

    • SHA1

      eb971a48ff415aac3f7f480d03e245f4a10ae60b

    • SHA256

      de52f3a1a34868d16614b49da1275a559514e5dc10150f145991ade1ce544634

    • SHA512

      e68bd63234b2c07c0117e0cdb2ca61a42325bc1ad0711d608f8f4a57cbe0fa5b59433d89aebf6d50ecdfadd0a7e330be10a93e296694b95fef1d8f70ab8344ac

    • SSDEEP

      768:QM34MSL0OXIxDMyDRjFVZrhgFwumSCbxTGy/BBGg4NK8jhh/vn2+mRcDkUCXVBnz:74M1OX8MUu3abBGy3G8srcfJ

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks