Overview

overview

10

Static

static

10

8d955eadec...54.exe

windows7-x64

10

8d955eadec...54.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d955eadec60d6176fbd7df6532efd4566eb281e2d53c2c6cf0660a3a409af54

  • Size

    136KB

  • Sample

    240509-brm35sae8v

  • MD5

    51ccf32bb2a6adb5bf0bf98ddebfd501

  • SHA1

    a953350d46dbd1e456a0162927b18ddfc4ca0517

  • SHA256

    8d955eadec60d6176fbd7df6532efd4566eb281e2d53c2c6cf0660a3a409af54

  • SHA512

    31250e964dbea95089e15757d503e1a5d10c8ac9f376911f849a7b6d9f1161e19aeb22102da810dfff7a468fd632d44ae3e37c77b8fb1214f968f3069c6710d9

  • SSDEEP

    1536:LkHMolYxM+6uyi8NkT3qqEvXFimOI0v0zkA01QSf9ve5XRlKjz0cZ44mjD9r8230:khIJT4XFimZN01x5e5XRlri/mjRrz3OT

Score
10/10
persistence

Malware Config

Targets

    • Target

      8d955eadec60d6176fbd7df6532efd4566eb281e2d53c2c6cf0660a3a409af54

    • Size

      136KB

    • MD5

      51ccf32bb2a6adb5bf0bf98ddebfd501

    • SHA1

      a953350d46dbd1e456a0162927b18ddfc4ca0517

    • SHA256

      8d955eadec60d6176fbd7df6532efd4566eb281e2d53c2c6cf0660a3a409af54

    • SHA512

      31250e964dbea95089e15757d503e1a5d10c8ac9f376911f849a7b6d9f1161e19aeb22102da810dfff7a468fd632d44ae3e37c77b8fb1214f968f3069c6710d9

    • SSDEEP

      1536:LkHMolYxM+6uyi8NkT3qqEvXFimOI0v0zkA01QSf9ve5XRlKjz0cZ44mjD9r8230:khIJT4XFimZN01x5e5XRlri/mjRrz3OT

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks