Overview

overview

10

Static

static

10

97ed1fba8f...30.exe

windows7-x64

9

97ed1fba8f...30.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97ed1fba8f050d65d2bf9596d4353b8cba49cc11f2999eaf06385657fb44f230

  • Size

    2.2MB

  • Sample

    240523-a9mdwsff82

  • MD5

    9fc6cda3cbf7724829b3091d1b1f4d92

  • SHA1

    c29041f50413c3ea94d8ed326558fc5caceb61cf

  • SHA256

    97ed1fba8f050d65d2bf9596d4353b8cba49cc11f2999eaf06385657fb44f230

  • SHA512

    264462a23d44315f4cce6229afe3c5e3626feae58b6cbbaf331b65476efe31a8deb839686f3e5e4dc89f0f3baca519c481fda609e1ff0d809a9d8297b5da353d

  • SSDEEP

    49152:Wbd+JCbRquA/m2yL5zbfFiV+XenmE3/zX:Wbd+Goq2VjnmU

Score
10/10
persistence

Malware Config

Targets

    • Target

      97ed1fba8f050d65d2bf9596d4353b8cba49cc11f2999eaf06385657fb44f230

    • Size

      2.2MB

    • MD5

      9fc6cda3cbf7724829b3091d1b1f4d92

    • SHA1

      c29041f50413c3ea94d8ed326558fc5caceb61cf

    • SHA256

      97ed1fba8f050d65d2bf9596d4353b8cba49cc11f2999eaf06385657fb44f230

    • SHA512

      264462a23d44315f4cce6229afe3c5e3626feae58b6cbbaf331b65476efe31a8deb839686f3e5e4dc89f0f3baca519c481fda609e1ff0d809a9d8297b5da353d

    • SSDEEP

      49152:Wbd+JCbRquA/m2yL5zbfFiV+XenmE3/zX:Wbd+Goq2VjnmU

    Score
    9/10
    persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks