Overview

overview

10

Static

static

10

5426170bca...af.exe

windows7-x64

10

5426170bca...af.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5426170bcaa6e3dbf866b1968202298bdad3447ca601d3911e165b270ae809af

  • Size

    176KB

  • Sample

    240519-1krkesbd8x

  • MD5

    2bfa18a0411647afe9ef8e51515a1caa

  • SHA1

    2b164647d74eaa79b119bff2588b7c602a990ddc

  • SHA256

    5426170bcaa6e3dbf866b1968202298bdad3447ca601d3911e165b270ae809af

  • SHA512

    bdc2f8e20e27ed298d5c94e6dee7c0dcf0416dc6849860a4ee94d877e52c8e102d38cff4746808e93aaa9ef0fa359ff369d8d43d94d644671655fd9318f0c3da

  • SSDEEP

    3072:2KqccIXV6TBFZnIPQarlOGA8d2E2fAYjmjRrz3E3:6cfMtFZIPQRXE2fAEG4

Score
10/10
persistence

Malware Config

Targets

    • Target

      5426170bcaa6e3dbf866b1968202298bdad3447ca601d3911e165b270ae809af

    • Size

      176KB

    • MD5

      2bfa18a0411647afe9ef8e51515a1caa

    • SHA1

      2b164647d74eaa79b119bff2588b7c602a990ddc

    • SHA256

      5426170bcaa6e3dbf866b1968202298bdad3447ca601d3911e165b270ae809af

    • SHA512

      bdc2f8e20e27ed298d5c94e6dee7c0dcf0416dc6849860a4ee94d877e52c8e102d38cff4746808e93aaa9ef0fa359ff369d8d43d94d644671655fd9318f0c3da

    • SSDEEP

      3072:2KqccIXV6TBFZnIPQarlOGA8d2E2fAYjmjRrz3E3:6cfMtFZIPQRXE2fAEG4

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks