Overview

overview

10

Static

static

3

166cfa4892...79.exe

windows7-x64

10

166cfa4892...79.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    166cfa48927836f37f5b729437877f743772f39400444c88b5c0e59d85442d79

  • Size

    109KB

  • Sample

    240428-xlkaysee32

  • MD5

    b0b63c2ee648ba0af5691d97f304ec92

  • SHA1

    d42875f251ec2f471f5c97aeaed4898956cfe14f

  • SHA256

    166cfa48927836f37f5b729437877f743772f39400444c88b5c0e59d85442d79

  • SHA512

    4afe2e2cb03f77b16eb879a53f86c2b63e72d3178a9b92dae83c26b14bb2e6d4c2c11c20919a9f9aabe7a5d3dbc22b91c82f399932ce94af859e1f0ea0cfe9ec

  • SSDEEP

    3072:NR69Eel415kYEND8fo3PXl9Z7S/yCsKh2EzZA/z:3TnENDgo35e/yCthvUz

Score
10/10
persistence

Malware Config

Targets

    • Target

      166cfa48927836f37f5b729437877f743772f39400444c88b5c0e59d85442d79

    • Size

      109KB

    • MD5

      b0b63c2ee648ba0af5691d97f304ec92

    • SHA1

      d42875f251ec2f471f5c97aeaed4898956cfe14f

    • SHA256

      166cfa48927836f37f5b729437877f743772f39400444c88b5c0e59d85442d79

    • SHA512

      4afe2e2cb03f77b16eb879a53f86c2b63e72d3178a9b92dae83c26b14bb2e6d4c2c11c20919a9f9aabe7a5d3dbc22b91c82f399932ce94af859e1f0ea0cfe9ec

    • SSDEEP

      3072:NR69Eel415kYEND8fo3PXl9Z7S/yCsKh2EzZA/z:3TnENDgo35e/yCthvUz

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks