Overview

overview

10

Static

static

10

8cf16fe353...99.exe

windows7-x64

10

8cf16fe353...99.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8cf16fe353b45691edac47f50e148600b8a85048148d11284ee832269b396599

  • Size

    192KB

  • Sample

    240506-278b5aff6w

  • MD5

    a53b28b640dee0b0ced863cf2989dbea

  • SHA1

    128a1140bbcf5c8507566d3fe39fb50198cb679d

  • SHA256

    8cf16fe353b45691edac47f50e148600b8a85048148d11284ee832269b396599

  • SHA512

    7a97f42685a959d8f9c6ebba76878d7b9231e7f26cfb613d475c6d94de3a3d192f15f980d9f15491734ca855d4a4bb7228fa42cf87fdf191b41d1811f307c3e9

  • SSDEEP

    3072:yOmJX+/SDUN98+e9r8Co3o8MdoutkTy27zU:yp+/SgN98/9g33YdoSkTl7zU

Score
10/10
persistence

Malware Config

Targets

    • Target

      8cf16fe353b45691edac47f50e148600b8a85048148d11284ee832269b396599

    • Size

      192KB

    • MD5

      a53b28b640dee0b0ced863cf2989dbea

    • SHA1

      128a1140bbcf5c8507566d3fe39fb50198cb679d

    • SHA256

      8cf16fe353b45691edac47f50e148600b8a85048148d11284ee832269b396599

    • SHA512

      7a97f42685a959d8f9c6ebba76878d7b9231e7f26cfb613d475c6d94de3a3d192f15f980d9f15491734ca855d4a4bb7228fa42cf87fdf191b41d1811f307c3e9

    • SSDEEP

      3072:yOmJX+/SDUN98+e9r8Co3o8MdoutkTy27zU:yp+/SgN98/9g33YdoSkTl7zU

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks