Overview

overview

6

Static

static

1

134fc5f505...6d.msi

windows7-x64

6

134fc5f505...6d.msi

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76e8f3a04274f429c181814deecdced5.bin

  • Size

    18.7MB

  • Sample

    240512-dfb8lsdc2w

  • MD5

    5877e742a5f8eb47c780184b520773bf

  • SHA1

    b763a24007fb4c446896e35f54fe7065145bf820

  • SHA256

    1992cf536e372a1c6274b7250898760b40a5d835175a1df9a7cf6be80ab47790

  • SHA512

    2dfdc3f4efac745a498febbc0868d51befd97f2c2af8364c38ceb4e778eabbafcababda5ab5c979b8b6345783901eb3a8218b77b140c6de866d2be58b9508275

  • SSDEEP

    393216:aMRyRSWGX97JMuHFeaUGgyqO+ASVXrOtxOZV/4TTEcNUwsTCltf:aMRTWMlJMuHFFoO+VXytxGl4TocNbsTI

Score
6/10
persistence

Malware Config

Targets

    • Target

      134fc5f505bd60f454537f877ce5286cf705ce05449acccfb4e9cd53b1a6776d.msi

    • Size

      19.5MB

    • MD5

      76e8f3a04274f429c181814deecdced5

    • SHA1

      054d2a928470874fad2bf1858f62b92e22bc3456

    • SHA256

      134fc5f505bd60f454537f877ce5286cf705ce05449acccfb4e9cd53b1a6776d

    • SHA512

      00768e51f00a11a00697a62367698b82c4c12984594eead5e2d58ea7ee978665c51c5c4d2df41aabfd5278b48df49358f5b627529c1ea6b887519b1e544c8494

    • SSDEEP

      393216:YdJcNzZWuVOj6P5ptgOGT1V12Hak5RoR9/mjHjAyw+YDJ46e:YKccE6jET1V1y5avQjAyw+YDm

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks