Overview

overview

10

Static

static

3

701674e88a...46.exe

windows7-x64

10

701674e88a...46.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    701674e88af5c1be3f40de710c920cca004595491a39108ceee7ee82db09ef46.exe

  • Size

    512KB

  • Sample

    240523-b5lggahc76

  • MD5

    1edad898b49eaee29d723140dabaec60

  • SHA1

    01cd0f00229867463deee6fe486e43d8b843c210

  • SHA256

    701674e88af5c1be3f40de710c920cca004595491a39108ceee7ee82db09ef46

  • SHA512

    d954f209a69f54adea960be5cf747811fcb1e7f2f1c9da56e1f0f06c9a8ee61247679d970a84d856f803aa592d0d91315c87cb15186c8b9aded4b4671ecd587f

  • SSDEEP

    6144:BZW7Jch9Q0rdQt383PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5fjlt01PB93T:7AJi92r/Ng1/Nblt01PBExK

Score
10/10
persistence

Malware Config

Targets

    • Target

      701674e88af5c1be3f40de710c920cca004595491a39108ceee7ee82db09ef46.exe

    • Size

      512KB

    • MD5

      1edad898b49eaee29d723140dabaec60

    • SHA1

      01cd0f00229867463deee6fe486e43d8b843c210

    • SHA256

      701674e88af5c1be3f40de710c920cca004595491a39108ceee7ee82db09ef46

    • SHA512

      d954f209a69f54adea960be5cf747811fcb1e7f2f1c9da56e1f0f06c9a8ee61247679d970a84d856f803aa592d0d91315c87cb15186c8b9aded4b4671ecd587f

    • SSDEEP

      6144:BZW7Jch9Q0rdQt383PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5fjlt01PB93T:7AJi92r/Ng1/Nblt01PBExK

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks