Overview

overview

10

Static

static

3

448def4d57...18.exe

windows7-x64

10

448def4d57...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    448def4d57cbaac9d9abbd325105d515a40d957dd3f34b623d786f68bf78f718.exe

  • Size

    96KB

  • Sample

    240522-1pvsmsaa8s

  • MD5

    140faf1ca341b0dc1ed1eb5449a229c0

  • SHA1

    8464eced2b1010b5bb978da939d2c61c690b46d8

  • SHA256

    448def4d57cbaac9d9abbd325105d515a40d957dd3f34b623d786f68bf78f718

  • SHA512

    db76e71729172de6e5e0f0a45ffa2fd989291c3a749ec2cd491790775edeec423cc61656d67885bdfb3ee99f00c2bdfbe833c74059f43f3e928bbd998b181bf6

  • SSDEEP

    1536:g4DOmdDJiDYKaxYcreCzb8nN6nk3OA2X1dW5Op1YJyWVqv6+Z4duV9jojTIvjrH:gEpJ9tue3YVqv6M4d69jc0vf

Score
10/10
persistence

Malware Config

Targets

    • Target

      448def4d57cbaac9d9abbd325105d515a40d957dd3f34b623d786f68bf78f718.exe

    • Size

      96KB

    • MD5

      140faf1ca341b0dc1ed1eb5449a229c0

    • SHA1

      8464eced2b1010b5bb978da939d2c61c690b46d8

    • SHA256

      448def4d57cbaac9d9abbd325105d515a40d957dd3f34b623d786f68bf78f718

    • SHA512

      db76e71729172de6e5e0f0a45ffa2fd989291c3a749ec2cd491790775edeec423cc61656d67885bdfb3ee99f00c2bdfbe833c74059f43f3e928bbd998b181bf6

    • SSDEEP

      1536:g4DOmdDJiDYKaxYcreCzb8nN6nk3OA2X1dW5Op1YJyWVqv6+Z4duV9jojTIvjrH:gEpJ9tue3YVqv6M4d69jc0vf

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks