Overview

overview

10

Static

static

3

6615f442db...8e.exe

windows7-x64

10

6615f442db...8e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6615f442db0c88cace092c060e2eb3efa568741238ed33fd9e5b63549639538e.exe

  • Size

    90KB

  • Sample

    240523-a7v81sfd5v

  • MD5

    178cbb543821dc800634b9bd06779ed0

  • SHA1

    78db8f733c62c331838bb8d8a32afeb6699301b7

  • SHA256

    6615f442db0c88cace092c060e2eb3efa568741238ed33fd9e5b63549639538e

  • SHA512

    47132f2203336845fbfab95dd4dbc20ac7c2bbe2319c96d7483d261617613f1526e495231693e37c7d91ab188406ae3cc6978b1d158d07081b713f1b8b8b15ab

  • SSDEEP

    1536:TFUAErtivUfobIkIw+XD6N7wEO6La/Hm+Ta3mSfGOu/Ub0VkVNK:TFUAYNfpkIwhN7bda/HLTpQGOu/Ub0+U

Score
10/10
persistence

Malware Config

Targets

    • Target

      6615f442db0c88cace092c060e2eb3efa568741238ed33fd9e5b63549639538e.exe

    • Size

      90KB

    • MD5

      178cbb543821dc800634b9bd06779ed0

    • SHA1

      78db8f733c62c331838bb8d8a32afeb6699301b7

    • SHA256

      6615f442db0c88cace092c060e2eb3efa568741238ed33fd9e5b63549639538e

    • SHA512

      47132f2203336845fbfab95dd4dbc20ac7c2bbe2319c96d7483d261617613f1526e495231693e37c7d91ab188406ae3cc6978b1d158d07081b713f1b8b8b15ab

    • SSDEEP

      1536:TFUAErtivUfobIkIw+XD6N7wEO6La/Hm+Ta3mSfGOu/Ub0VkVNK:TFUAYNfpkIwhN7bda/HLTpQGOu/Ub0+U

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks