Overview

overview

10

Static

static

10

658a53af0b...f6.exe

windows7-x64

10

658a53af0b...f6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    658a53af0b2dc5af63fbbcd2469de870f9e8675f886a82cbfc6ed533d304aff6

  • Size

    192KB

  • Sample

    240415-11krtahf47

  • MD5

    b36afc2a31b9fde04ed7c7bb3373dbab

  • SHA1

    84cbf620b5d7138c2534dab39c1960ca7f48f7d2

  • SHA256

    658a53af0b2dc5af63fbbcd2469de870f9e8675f886a82cbfc6ed533d304aff6

  • SHA512

    c4bc950f43cd630e9b338aa0d4f801859404bf0abed2a49dc1dd83f06b5b509b74f9a6d14db0ecd1c490851b916d801d11ad9011f45f79ce17834b8e03084e00

  • SSDEEP

    1536:U+VySp27PPdshOn2uYY79FLSn7dBnK+Z4trciIGwP3Z8Nnouy8O6Nuf51TQmQM2j:nnp2bPdYO2uIdB+rm7JeoutkTy27zU

Score
10/10
persistence

Malware Config

Targets

    • Target

      658a53af0b2dc5af63fbbcd2469de870f9e8675f886a82cbfc6ed533d304aff6

    • Size

      192KB

    • MD5

      b36afc2a31b9fde04ed7c7bb3373dbab

    • SHA1

      84cbf620b5d7138c2534dab39c1960ca7f48f7d2

    • SHA256

      658a53af0b2dc5af63fbbcd2469de870f9e8675f886a82cbfc6ed533d304aff6

    • SHA512

      c4bc950f43cd630e9b338aa0d4f801859404bf0abed2a49dc1dd83f06b5b509b74f9a6d14db0ecd1c490851b916d801d11ad9011f45f79ce17834b8e03084e00

    • SSDEEP

      1536:U+VySp27PPdshOn2uYY79FLSn7dBnK+Z4trciIGwP3Z8Nnouy8O6Nuf51TQmQM2j:nnp2bPdYO2uIdB+rm7JeoutkTy27zU

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks