Overview

overview

10

Static

static

10

032511fa6e...d9.exe

windows7-x64

10

032511fa6e...d9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    032511fa6ebf27c0f65d38bf328a07b8ca817dedccea523ebf918dea52f6bcd9

  • Size

    350KB

  • Sample

    240517-wstyascb56

  • MD5

    016fd6e2688fd63cde77f082a796bed8

  • SHA1

    80f33d28ae65ef1d11daca0ba59d58bacd9c4af9

  • SHA256

    032511fa6ebf27c0f65d38bf328a07b8ca817dedccea523ebf918dea52f6bcd9

  • SHA512

    0052fa208ed4c168a1c0013e0c727216e9bf8b20c6c42469e72cd72c29c739178daf75562501503b05d176d819b743bf73ac7f76fb28bc6a9a74a324f0192b22

  • SSDEEP

    6144:QlGzkA3HVpaopOpHVILifyeYVDcfflXpX6LRifyeYVDc:QlG/HAHyefyeYCdXpXZfyeY

Score
10/10
persistence

Malware Config

Targets

    • Target

      032511fa6ebf27c0f65d38bf328a07b8ca817dedccea523ebf918dea52f6bcd9

    • Size

      350KB

    • MD5

      016fd6e2688fd63cde77f082a796bed8

    • SHA1

      80f33d28ae65ef1d11daca0ba59d58bacd9c4af9

    • SHA256

      032511fa6ebf27c0f65d38bf328a07b8ca817dedccea523ebf918dea52f6bcd9

    • SHA512

      0052fa208ed4c168a1c0013e0c727216e9bf8b20c6c42469e72cd72c29c739178daf75562501503b05d176d819b743bf73ac7f76fb28bc6a9a74a324f0192b22

    • SSDEEP

      6144:QlGzkA3HVpaopOpHVILifyeYVDcfflXpX6LRifyeYVDc:QlG/HAHyefyeYCdXpXZfyeY

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks