Overview

overview

10

Static

static

3

1cf747562d...8a.exe

windows7-x64

10

1cf747562d...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cf747562d83c11abd180d2a09ca3a1c340e89399e7798323fc88bbbe3fea98a

  • Size

    52KB

  • Sample

    240410-xyzleahb27

  • MD5

    ea2ca91f0165110a96c0aaf0b2c4918a

  • SHA1

    4658382ac4d826f0e11c877e16397bc2a5d8c6e5

  • SHA256

    1cf747562d83c11abd180d2a09ca3a1c340e89399e7798323fc88bbbe3fea98a

  • SHA512

    126195acb0acf8bb2cc7c25a3d215ae968656752e2c3f306b490b33a9c019afd67d3da4a438bfc0283b59e405156c845d9aa2b700cf49ba78ba8dac93d2721b3

  • SSDEEP

    768:Py3jOlxDmgxYcm8+QtzbFMkfdE3NQx/D4CcZmB523cw/1H5F/s+YDMABvKWe:P2OlxKgxYcLzbr+6JD462s2ADMAdKZ

Score
10/10
persistence

Malware Config

Targets

    • Target

      1cf747562d83c11abd180d2a09ca3a1c340e89399e7798323fc88bbbe3fea98a

    • Size

      52KB

    • MD5

      ea2ca91f0165110a96c0aaf0b2c4918a

    • SHA1

      4658382ac4d826f0e11c877e16397bc2a5d8c6e5

    • SHA256

      1cf747562d83c11abd180d2a09ca3a1c340e89399e7798323fc88bbbe3fea98a

    • SHA512

      126195acb0acf8bb2cc7c25a3d215ae968656752e2c3f306b490b33a9c019afd67d3da4a438bfc0283b59e405156c845d9aa2b700cf49ba78ba8dac93d2721b3

    • SSDEEP

      768:Py3jOlxDmgxYcm8+QtzbFMkfdE3NQx/D4CcZmB523cw/1H5F/s+YDMABvKWe:P2OlxKgxYcLzbr+6JD462s2ADMAdKZ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks