Overview

overview

10

Static

static

3

bcfa4bd2c5...87.exe

windows7-x64

10

bcfa4bd2c5...87.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bcfa4bd2c599d1b1b0aa641cc2d20c006bc94859a16b81775098b82329ac4487

  • Size

    109KB

  • Sample

    240420-ck6gksdf97

  • MD5

    342a9137e30813903c3e8d9bc02396b9

  • SHA1

    d1b0021131cb9b9d3f29b985c106b3ba93482dd1

  • SHA256

    bcfa4bd2c599d1b1b0aa641cc2d20c006bc94859a16b81775098b82329ac4487

  • SHA512

    2ca5c7e7504ebe4ccfe2ae2ee940bfe53cb0c87e7994ae62503bff44aecbd582c2cca201c6105c2b61df83eb2c9091863afb81d5b301372d368de05f5b4da3ff

  • SSDEEP

    3072:+JM3AfyonNXCbwUlYjJL4ZrQPDZsUIi8H8fo3PXl9Z7S/yCsKh2EzZA/z:ECNon8bwUlYjJL4Z0LZsFHgo35e/yCtE

Score
10/10
persistence

Malware Config

Targets

    • Target

      bcfa4bd2c599d1b1b0aa641cc2d20c006bc94859a16b81775098b82329ac4487

    • Size

      109KB

    • MD5

      342a9137e30813903c3e8d9bc02396b9

    • SHA1

      d1b0021131cb9b9d3f29b985c106b3ba93482dd1

    • SHA256

      bcfa4bd2c599d1b1b0aa641cc2d20c006bc94859a16b81775098b82329ac4487

    • SHA512

      2ca5c7e7504ebe4ccfe2ae2ee940bfe53cb0c87e7994ae62503bff44aecbd582c2cca201c6105c2b61df83eb2c9091863afb81d5b301372d368de05f5b4da3ff

    • SSDEEP

      3072:+JM3AfyonNXCbwUlYjJL4ZrQPDZsUIi8H8fo3PXl9Z7S/yCsKh2EzZA/z:ECNon8bwUlYjJL4Z0LZsFHgo35e/yCtE

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks