Overview

overview

8

Static

static

3

Thavipah P...FN.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Thavipah Public FN.exe

  • Size

    1014KB

  • Sample

    240515-nd92zafa24

  • MD5

    b26a951d45fde8b47cf81febfecdb538

  • SHA1

    cc29b62ae86bd6c84e8b404d6742c9993cbedf17

  • SHA256

    7b861bf1c96ec54494e4033b77dd8e3cbe45cd3c0eddad7fb23da3868340561e

  • SHA512

    0e9fecdab296b9c907b31193bd16775abdfa5dcf99e383dafb3292a41a102c87bceb0d29c7e1c48d41f556900085b570940db5db726c61cd9f0d067c10390117

  • SSDEEP

    12288:v5S2rShjLzO2nPmpC0IGV0hayIfY2gQnxDb+5vl4jCnwHtNXw5dc2pO:U2AfzOgJ0XV08Y2gQZ+1GCnwHtO5FpO

Score
8/10
persistence

Malware Config

Targets

    • Target

      Thavipah Public FN.exe

    • Size

      1014KB

    • MD5

      b26a951d45fde8b47cf81febfecdb538

    • SHA1

      cc29b62ae86bd6c84e8b404d6742c9993cbedf17

    • SHA256

      7b861bf1c96ec54494e4033b77dd8e3cbe45cd3c0eddad7fb23da3868340561e

    • SHA512

      0e9fecdab296b9c907b31193bd16775abdfa5dcf99e383dafb3292a41a102c87bceb0d29c7e1c48d41f556900085b570940db5db726c61cd9f0d067c10390117

    • SSDEEP

      12288:v5S2rShjLzO2nPmpC0IGV0hayIfY2gQnxDb+5vl4jCnwHtNXw5dc2pO:U2AfzOgJ0XV08Y2gQZ+1GCnwHtO5FpO

    Score
    8/10
    persistence

    • Sets service image path in registry

      persistence

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks