Overview

overview

10

Static

static

10

e643192862...f1.exe

windows7-x64

9

e643192862...f1.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e643192862c94116a120f60e54c3f538a998e14c87c36e4f018c27dcb1bf7af1

  • Size

    91KB

  • Sample

    240514-d4ptlshg28

  • MD5

    943356086845dc18ee6d2c3d225a8013

  • SHA1

    5c66f33193387d74d5b2a47217bb2fe00b788ed8

  • SHA256

    e643192862c94116a120f60e54c3f538a998e14c87c36e4f018c27dcb1bf7af1

  • SHA512

    def1c99371f9f171c0a06844168ac72e8329c681e749f53c20dc2186c080f083b89f89f1f250abfeb76a95002c87368218ab832957f4a52d9ad86814a5a526f0

  • SSDEEP

    1536:Hlqls0GgUyj5JxdA4Oj3W2Fsdq4FcG+sdguxnSngBNpT/mzNnxPAxEAz0+/SU:HQC/yj5JO3MncG+Hu54Fx4xE8qU

Score
10/10
persistence

Malware Config

Targets

    • Target

      e643192862c94116a120f60e54c3f538a998e14c87c36e4f018c27dcb1bf7af1

    • Size

      91KB

    • MD5

      943356086845dc18ee6d2c3d225a8013

    • SHA1

      5c66f33193387d74d5b2a47217bb2fe00b788ed8

    • SHA256

      e643192862c94116a120f60e54c3f538a998e14c87c36e4f018c27dcb1bf7af1

    • SHA512

      def1c99371f9f171c0a06844168ac72e8329c681e749f53c20dc2186c080f083b89f89f1f250abfeb76a95002c87368218ab832957f4a52d9ad86814a5a526f0

    • SSDEEP

      1536:Hlqls0GgUyj5JxdA4Oj3W2Fsdq4FcG+sdguxnSngBNpT/mzNnxPAxEAz0+/SU:HQC/yj5JO3MncG+Hu54Fx4xE8qU

    Score
    9/10
    persistence

    • UPX dump on OEP (original entry point)

    • Sets service image path in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks