Overview

overview

10

Static

static

3

65b7f38974...1c.exe

windows7-x64

10

65b7f38974...1c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65b7f389747956ef721b85c3b7ced2c99b76cf2ab520977a11418c2fd8985f1c.exe

  • Size

    512KB

  • Sample

    240523-a6rjfafe66

  • MD5

    081fc20c43302010acd61df4a082a410

  • SHA1

    5b50d516be1508f306540abbb28e695764921a49

  • SHA256

    65b7f389747956ef721b85c3b7ced2c99b76cf2ab520977a11418c2fd8985f1c

  • SHA512

    cc6fca5bbb3d76fa58c405091ceea7ae3035387f3e5a90fd2106191ecb0ca2654ef1e63995acef110cacf6741e9051dd2960fd7dbc987a8297abba9cb436a966

  • SSDEEP

    6144:S4bqDL3rQQ5SMPrdQt383PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5fjlt01v:PODjrQ+S1r/Ng1/Nblt01PBExK

Score
10/10
persistence

Malware Config

Targets

    • Target

      65b7f389747956ef721b85c3b7ced2c99b76cf2ab520977a11418c2fd8985f1c.exe

    • Size

      512KB

    • MD5

      081fc20c43302010acd61df4a082a410

    • SHA1

      5b50d516be1508f306540abbb28e695764921a49

    • SHA256

      65b7f389747956ef721b85c3b7ced2c99b76cf2ab520977a11418c2fd8985f1c

    • SHA512

      cc6fca5bbb3d76fa58c405091ceea7ae3035387f3e5a90fd2106191ecb0ca2654ef1e63995acef110cacf6741e9051dd2960fd7dbc987a8297abba9cb436a966

    • SSDEEP

      6144:S4bqDL3rQQ5SMPrdQt383PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5fjlt01v:PODjrQ+S1r/Ng1/Nblt01PBExK

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks