Overview

overview

10

Static

static

3

772fa1a136...fd.exe

windows7-x64

10

772fa1a136...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    772fa1a1367ecc4b9768eeba400925d61e7f0efdcba0bfc6d700c4b297f409fd.exe

  • Size

    80KB

  • Sample

    240523-ct3r2saf49

  • MD5

    03b1530e22fdf1b2970cbd715c36dc20

  • SHA1

    6bd79dfddbf0f3145503a13da2f5a90dbd1150b9

  • SHA256

    772fa1a1367ecc4b9768eeba400925d61e7f0efdcba0bfc6d700c4b297f409fd

  • SHA512

    559ce4505f0deed8b83472a7f8e4fbfc24c73e5c382679cf1cc413e6b2f4adbf6948143e8aec566b1bf6fc575ee92dca4aa2d74c9401905bb5f247be6c54be86

  • SSDEEP

    1536:bt0cjyHHZWqYeNy8wuO7jZNap4YpxzDfWqdMVrlEFtyb7IYOOqw4Tv:bt0AEIq1vsQ6MxzTWqAhELy1MTTv

Score
10/10
persistence

Malware Config

Targets

    • Target

      772fa1a1367ecc4b9768eeba400925d61e7f0efdcba0bfc6d700c4b297f409fd.exe

    • Size

      80KB

    • MD5

      03b1530e22fdf1b2970cbd715c36dc20

    • SHA1

      6bd79dfddbf0f3145503a13da2f5a90dbd1150b9

    • SHA256

      772fa1a1367ecc4b9768eeba400925d61e7f0efdcba0bfc6d700c4b297f409fd

    • SHA512

      559ce4505f0deed8b83472a7f8e4fbfc24c73e5c382679cf1cc413e6b2f4adbf6948143e8aec566b1bf6fc575ee92dca4aa2d74c9401905bb5f247be6c54be86

    • SSDEEP

      1536:bt0cjyHHZWqYeNy8wuO7jZNap4YpxzDfWqdMVrlEFtyb7IYOOqw4Tv:bt0AEIq1vsQ6MxzTWqAhELy1MTTv

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks