Overview

overview

10

Static

static

10

f6c796f6f6...6d.exe

windows7-x64

10

f6c796f6f6...6d.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    f6c796f6f6525594e29bc8909b689747561416a6888e596bf19988e3159b066d

  • Size

    226KB

  • Sample

    240422-fv9tjagb25

  • MD5

    bd6508c6c20c4ec74d38381f323e6ba8

  • SHA1

    2f5305f4a2665e053bc3c716275aed8999d228a3

  • SHA256

    f6c796f6f6525594e29bc8909b689747561416a6888e596bf19988e3159b066d

  • SHA512

    8bd174710e28b8b481567ef167d2ebb7a38bb97a03742aa54c322163548cc3e0b6039cfb7723c9cd6a3ba5eb5e7ee29c6f125aade2c60838acac6377ca1d518f

  • SSDEEP

    3072:zL/dyzMx4d5/DKcWmjRvDKcpDKcWmjRrzNtQtjDKcWmjRrzNtb:zLFyzMxmQxEtQtsEtb

Score
10/10
persistence

Malware Config

Targets

    • Target

      f6c796f6f6525594e29bc8909b689747561416a6888e596bf19988e3159b066d

    • Size

      226KB

    • MD5

      bd6508c6c20c4ec74d38381f323e6ba8

    • SHA1

      2f5305f4a2665e053bc3c716275aed8999d228a3

    • SHA256

      f6c796f6f6525594e29bc8909b689747561416a6888e596bf19988e3159b066d

    • SHA512

      8bd174710e28b8b481567ef167d2ebb7a38bb97a03742aa54c322163548cc3e0b6039cfb7723c9cd6a3ba5eb5e7ee29c6f125aade2c60838acac6377ca1d518f

    • SSDEEP

      3072:zL/dyzMx4d5/DKcWmjRvDKcpDKcWmjRrzNtQtjDKcWmjRrzNtb:zLFyzMxmQxEtQtsEtb

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks