Overview

overview

10

Static

static

3

5d9dce8ea4...96.exe

windows7-x64

10

5d9dce8ea4...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d9dce8ea4958bdde51eba9b575ba5786214f7c67db3e41ed94f1c782d454b96.exe

  • Size

    465KB

  • Sample

    240523-aaa7ksea3s

  • MD5

    21c01ec0f7ca39015c8676a8f21895e0

  • SHA1

    aea59ce236357bea3cedf7aeb3a87cc9cc79c4a5

  • SHA256

    5d9dce8ea4958bdde51eba9b575ba5786214f7c67db3e41ed94f1c782d454b96

  • SHA512

    9e1ea900caad327d8262477d5f8e64cc0dbd8e50222d1b0b010d1b466edb981cb1cd94f758e155561521b490acdcc20104665425714fa7671c1ec282afd3d2ee

  • SSDEEP

    6144:JA0wnFZe8cPQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5frdQt383PQ///NR5fp:GFN/Ng1/Nmr/Ng1/NSf

Score
10/10
persistence

Malware Config

Targets

    • Target

      5d9dce8ea4958bdde51eba9b575ba5786214f7c67db3e41ed94f1c782d454b96.exe

    • Size

      465KB

    • MD5

      21c01ec0f7ca39015c8676a8f21895e0

    • SHA1

      aea59ce236357bea3cedf7aeb3a87cc9cc79c4a5

    • SHA256

      5d9dce8ea4958bdde51eba9b575ba5786214f7c67db3e41ed94f1c782d454b96

    • SHA512

      9e1ea900caad327d8262477d5f8e64cc0dbd8e50222d1b0b010d1b466edb981cb1cd94f758e155561521b490acdcc20104665425714fa7671c1ec282afd3d2ee

    • SSDEEP

      6144:JA0wnFZe8cPQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5frdQt383PQ///NR5fp:GFN/Ng1/Nmr/Ng1/NSf

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks