Overview

overview

10

Static

static

10

f641611fff...95.exe

windows7-x64

10

f641611fff...95.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f641611fffa30dacb1f8889784ff3aefa26e62e5836e6e1898ebc83cd09c6495

  • Size

    344KB

  • Sample

    240504-fqspfsgh63

  • MD5

    40de39bc79c10e44525e35ac81f2c82d

  • SHA1

    74ab888ad5f6eafa438b0cd17a2eb76d32c99d32

  • SHA256

    f641611fffa30dacb1f8889784ff3aefa26e62e5836e6e1898ebc83cd09c6495

  • SHA512

    1ca98c7f4e577d8dec77dc740d682c10319a2a6463651f43786407c64e3848d7831e7e3651beea7ebf0b700d47445b0a864324fa3178bcdd70b4aa4dc5dc1938

  • SSDEEP

    6144:HDWeAXxCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:HkCpXImbzQD6OkPgl6bmIjKn

Score
10/10
persistence

Malware Config

Targets

    • Target

      f641611fffa30dacb1f8889784ff3aefa26e62e5836e6e1898ebc83cd09c6495

    • Size

      344KB

    • MD5

      40de39bc79c10e44525e35ac81f2c82d

    • SHA1

      74ab888ad5f6eafa438b0cd17a2eb76d32c99d32

    • SHA256

      f641611fffa30dacb1f8889784ff3aefa26e62e5836e6e1898ebc83cd09c6495

    • SHA512

      1ca98c7f4e577d8dec77dc740d682c10319a2a6463651f43786407c64e3848d7831e7e3651beea7ebf0b700d47445b0a864324fa3178bcdd70b4aa4dc5dc1938

    • SSDEEP

      6144:HDWeAXxCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:HkCpXImbzQD6OkPgl6bmIjKn

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks