Overview

overview

10

Static

static

3

588456fb54...f2.exe

windows7-x64

10

588456fb54...f2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    588456fb5422c3ca6eb5212e7bde1d55ace3b5641769ac8577d3849145c99ff2.exe

  • Size

    96KB

  • Sample

    240522-3h8r2adc72

  • MD5

    16847dc9904ea11bd40625df252bc960

  • SHA1

    633200b09d7822131ed99037865fa66ca42748c7

  • SHA256

    588456fb5422c3ca6eb5212e7bde1d55ace3b5641769ac8577d3849145c99ff2

  • SHA512

    ff9e95ed1cd86cdde8fc6171b6a1657163c7f8a4fa235bafba1d0517f11fde40f996beee08beae6ed9fb1ba2de3e5d7611f9eaf311e372a2b6ad63270129b7bd

  • SSDEEP

    1536:WIlkrsNpN2V2cxYafLj7pK6zUmaC7odSyfvgsmRQ+VR5R45WtqV9R2R462izMg3W:BlkgNpN2PxHLj9KBmaC7odSyfvgsme+Q

Score
10/10
persistence

Malware Config

Targets

    • Target

      588456fb5422c3ca6eb5212e7bde1d55ace3b5641769ac8577d3849145c99ff2.exe

    • Size

      96KB

    • MD5

      16847dc9904ea11bd40625df252bc960

    • SHA1

      633200b09d7822131ed99037865fa66ca42748c7

    • SHA256

      588456fb5422c3ca6eb5212e7bde1d55ace3b5641769ac8577d3849145c99ff2

    • SHA512

      ff9e95ed1cd86cdde8fc6171b6a1657163c7f8a4fa235bafba1d0517f11fde40f996beee08beae6ed9fb1ba2de3e5d7611f9eaf311e372a2b6ad63270129b7bd

    • SSDEEP

      1536:WIlkrsNpN2V2cxYafLj7pK6zUmaC7odSyfvgsmRQ+VR5R45WtqV9R2R462izMg3W:BlkgNpN2PxHLj9KBmaC7odSyfvgsme+Q

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks