Overview

overview

10

Static

static

3

6a7c5ec544...0f.exe

windows7-x64

10

6a7c5ec544...0f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a7c5ec54462abf0a4b5e31ef44f0ee1dea6b5afa39ce706d7000a785e39d30f.exe

  • Size

    96KB

  • Sample

    240523-bldyaaga7z

  • MD5

    22de4646c3155fc107f08435d49df550

  • SHA1

    e26a13dec4a87fd10777b53493edaf071dba2d53

  • SHA256

    6a7c5ec54462abf0a4b5e31ef44f0ee1dea6b5afa39ce706d7000a785e39d30f

  • SHA512

    3dff11342ca3ce37ea419dd9d5701ee94e034a063b4d507e3e624fc26a5ba927d18046aad597da7fc1333df3748aeb19bbc5fd3bcd36d9f0da640bf9aa76ccf5

  • SSDEEP

    1536:FkY77d5vlK/8ckBsaBTwGWQEgAVpj8/CdNmZCwvZnmV/BOmaCMy0QiLiizHNQNdq:FF281uaXWQnAVpj7dN4C6mV5OmaCMyEr

Score
10/10
persistence

Malware Config

Targets

    • Target

      6a7c5ec54462abf0a4b5e31ef44f0ee1dea6b5afa39ce706d7000a785e39d30f.exe

    • Size

      96KB

    • MD5

      22de4646c3155fc107f08435d49df550

    • SHA1

      e26a13dec4a87fd10777b53493edaf071dba2d53

    • SHA256

      6a7c5ec54462abf0a4b5e31ef44f0ee1dea6b5afa39ce706d7000a785e39d30f

    • SHA512

      3dff11342ca3ce37ea419dd9d5701ee94e034a063b4d507e3e624fc26a5ba927d18046aad597da7fc1333df3748aeb19bbc5fd3bcd36d9f0da640bf9aa76ccf5

    • SSDEEP

      1536:FkY77d5vlK/8ckBsaBTwGWQEgAVpj8/CdNmZCwvZnmV/BOmaCMy0QiLiizHNQNdq:FF281uaXWQnAVpj7dN4C6mV5OmaCMyEr

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks