Overview

overview

10

Static

static

3

6bb510e611...60.exe

windows7-x64

10

6bb510e611...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6bb510e6112d239d37fc1699804fb460518378e69f49c3b2bb9937e7fd3e6160.exe

  • Size

    99KB

  • Sample

    240523-bpqfgsgd98

  • MD5

    2570e3c46b01b498361e49da8b2760d0

  • SHA1

    c7618049747dbc8801f5ad73f2d78f8b88b9bcd3

  • SHA256

    6bb510e6112d239d37fc1699804fb460518378e69f49c3b2bb9937e7fd3e6160

  • SHA512

    382e3b084d655b356b3aff2fffec33040ef3cb295ff0ea714126f3d8f5143e11769e1b665bb15e072d6f62342d2d596988a84a7198c0f75903497e380be48cbb

  • SSDEEP

    3072:V7ibI1BtwDKKmrvz6bUTbmgb3a3+X13XRzG:5iDrmSbKbf7aOl3BzG

Score
10/10
persistence

Malware Config

Targets

    • Target

      6bb510e6112d239d37fc1699804fb460518378e69f49c3b2bb9937e7fd3e6160.exe

    • Size

      99KB

    • MD5

      2570e3c46b01b498361e49da8b2760d0

    • SHA1

      c7618049747dbc8801f5ad73f2d78f8b88b9bcd3

    • SHA256

      6bb510e6112d239d37fc1699804fb460518378e69f49c3b2bb9937e7fd3e6160

    • SHA512

      382e3b084d655b356b3aff2fffec33040ef3cb295ff0ea714126f3d8f5143e11769e1b665bb15e072d6f62342d2d596988a84a7198c0f75903497e380be48cbb

    • SSDEEP

      3072:V7ibI1BtwDKKmrvz6bUTbmgb3a3+X13XRzG:5iDrmSbKbf7aOl3BzG

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks