Overview

overview

10

Static

static

10

683bf14f78...f6.exe

windows7-x64

10

683bf14f78...f6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    683bf14f78d1d247bdc49bb0ea5c4c44b9c67d80fb91ddc24c8ce6b6030684f6

  • Size

    416KB

  • Sample

    240515-2zhfqsge6w

  • MD5

    1327f0216eabad9d48a776df41a26b7f

  • SHA1

    40c6cc40386914a8aad0f259addf0956cddd73cb

  • SHA256

    683bf14f78d1d247bdc49bb0ea5c4c44b9c67d80fb91ddc24c8ce6b6030684f6

  • SHA512

    ed1faf48bf8fa888c3857d8f45016f00ef78e1440f23efb17c6aa7a02796dc9925ec6cbbc31d84e1ac791d83e9abf95b827d42ed28af537834e03b9f88535d54

  • SSDEEP

    3072:zTubaAC9WVRMdV6c+M62uVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWP:zSbsgo6c+suRs+HLlD0rN2ZwVht740PP

Score
10/10
persistence

Malware Config

Targets

    • Target

      683bf14f78d1d247bdc49bb0ea5c4c44b9c67d80fb91ddc24c8ce6b6030684f6

    • Size

      416KB

    • MD5

      1327f0216eabad9d48a776df41a26b7f

    • SHA1

      40c6cc40386914a8aad0f259addf0956cddd73cb

    • SHA256

      683bf14f78d1d247bdc49bb0ea5c4c44b9c67d80fb91ddc24c8ce6b6030684f6

    • SHA512

      ed1faf48bf8fa888c3857d8f45016f00ef78e1440f23efb17c6aa7a02796dc9925ec6cbbc31d84e1ac791d83e9abf95b827d42ed28af537834e03b9f88535d54

    • SSDEEP

      3072:zTubaAC9WVRMdV6c+M62uVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWP:zSbsgo6c+suRs+HLlD0rN2ZwVht740PP

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks