Overview

overview

10

Static

static

10

23ff6a5446...fe.exe

windows7-x64

10

23ff6a5446...fe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    23ff6a54460335e5b89a2144e57268ace78a3c1f45b82f31bcfaacaa754355fe

  • Size

    479KB

  • Sample

    240513-x86gpsba71

  • MD5

    420bfbc679e696ff9f2f32bad13600eb

  • SHA1

    429519526c4382a1794aa75785b2b52c7f204976

  • SHA256

    23ff6a54460335e5b89a2144e57268ace78a3c1f45b82f31bcfaacaa754355fe

  • SHA512

    59a1cec227fedd4d7a7d9a5b19a2b6f5a491adca97527f4f2ccd305256f5af6c02f738cfbd66d31ed3fc7299d225be4dd9b2fefb44574a5d299ea983cce6d75d

  • SSDEEP

    6144:y/JuPOwXYrMdlvkGr0f+uPOwXYrMdl2MPnhd8+ZDI:yLwIaJwISfPI

Score
10/10
persistence

Malware Config

Targets

    • Target

      23ff6a54460335e5b89a2144e57268ace78a3c1f45b82f31bcfaacaa754355fe

    • Size

      479KB

    • MD5

      420bfbc679e696ff9f2f32bad13600eb

    • SHA1

      429519526c4382a1794aa75785b2b52c7f204976

    • SHA256

      23ff6a54460335e5b89a2144e57268ace78a3c1f45b82f31bcfaacaa754355fe

    • SHA512

      59a1cec227fedd4d7a7d9a5b19a2b6f5a491adca97527f4f2ccd305256f5af6c02f738cfbd66d31ed3fc7299d225be4dd9b2fefb44574a5d299ea983cce6d75d

    • SSDEEP

      6144:y/JuPOwXYrMdlvkGr0f+uPOwXYrMdl2MPnhd8+ZDI:yLwIaJwISfPI

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks