Overview

overview

10

Static

static

10

b73eeefb15...9b.exe

windows7-x64

10

b73eeefb15...9b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b73eeefb15ba49bf593a305ec7ef533ae60587194658f6c879c522f3fcfdf29b

  • Size

    173KB

  • Sample

    240429-bveaeaeb87

  • MD5

    1ff23a15196dab74d0e392b948bd43a9

  • SHA1

    4fd8a7cda36b3ecdb46e060aa661162a3b7cc392

  • SHA256

    b73eeefb15ba49bf593a305ec7ef533ae60587194658f6c879c522f3fcfdf29b

  • SHA512

    a5dfe145be46fe67bfc3aa9342f9b9084dd3dbec3d2c41a59af8d6007f4cbd734d2f98106400545cd064a11ad4f24d657dc5a249c660608eb37e50b3f0623728

  • SSDEEP

    3072:WLIYa6R0FAB+s/vacknVwNtvSO06+ebX:WLyVFlsHhYyNtvSO0e

Score
10/10
persistence

Malware Config

Targets

    • Target

      b73eeefb15ba49bf593a305ec7ef533ae60587194658f6c879c522f3fcfdf29b

    • Size

      173KB

    • MD5

      1ff23a15196dab74d0e392b948bd43a9

    • SHA1

      4fd8a7cda36b3ecdb46e060aa661162a3b7cc392

    • SHA256

      b73eeefb15ba49bf593a305ec7ef533ae60587194658f6c879c522f3fcfdf29b

    • SHA512

      a5dfe145be46fe67bfc3aa9342f9b9084dd3dbec3d2c41a59af8d6007f4cbd734d2f98106400545cd064a11ad4f24d657dc5a249c660608eb37e50b3f0623728

    • SSDEEP

      3072:WLIYa6R0FAB+s/vacknVwNtvSO06+ebX:WLyVFlsHhYyNtvSO0e

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Detects executables built or packed with MPress PE compressor

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks