Overview

overview

10

Static

static

3

7b85af78b3...89.exe

windows7-x64

10

7b85af78b3...89.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b85af78b32d06e2ea9a5bd129167644cc8c30243adad96fa0757b7dcea25589

  • Size

    135KB

  • Sample

    240522-bz272agb68

  • MD5

    0fa7b57aa73d7e81d2019e3c327dbde6

  • SHA1

    f866b1e97f5d92dceb9e9e302df5c4fa938ab9c9

  • SHA256

    7b85af78b32d06e2ea9a5bd129167644cc8c30243adad96fa0757b7dcea25589

  • SHA512

    d0b44e540eccb73e7fb1afef3f3c6a91a62584b5474b2f45104ede1ad49b82dc1749bfb0435ad604f75cfbbed27b381235b72e88c3dfda134f38dc368bb1b248

  • SSDEEP

    1536:XfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbg+K:XVqoCl/YgjxEufVU0TbTyDDalZK

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7b85af78b32d06e2ea9a5bd129167644cc8c30243adad96fa0757b7dcea25589

    • Size

      135KB

    • MD5

      0fa7b57aa73d7e81d2019e3c327dbde6

    • SHA1

      f866b1e97f5d92dceb9e9e302df5c4fa938ab9c9

    • SHA256

      7b85af78b32d06e2ea9a5bd129167644cc8c30243adad96fa0757b7dcea25589

    • SHA512

      d0b44e540eccb73e7fb1afef3f3c6a91a62584b5474b2f45104ede1ad49b82dc1749bfb0435ad604f75cfbbed27b381235b72e88c3dfda134f38dc368bb1b248

    • SSDEEP

      1536:XfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbg+K:XVqoCl/YgjxEufVU0TbTyDDalZK

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Scheduled Task/Job

1
T1053

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Scheduled Task/Job

1
T1053

Defense Evasion

Hide Artifacts

1
T1564

Hidden Files and Directories

1
T1564.001

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks