Overview

overview

10

Static

static

10

08f2fbb2d4...02.exe

windows7-x64

10

08f2fbb2d4...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08f2fbb2d4a012e867a4ac8ea8ef9790d8553f55691253daf169fc08a656ce02

  • Size

    385KB

  • Sample

    240523-w1n21sbg46

  • MD5

    ccc9d7a04a112a61e2220246f8a25fcc

  • SHA1

    d1f983c9c21926dd9cc96d5ba68bd7243525b495

  • SHA256

    08f2fbb2d4a012e867a4ac8ea8ef9790d8553f55691253daf169fc08a656ce02

  • SHA512

    553ee38312857163897afab8f4f3f7a89f8d050d4947bdc25c5a453f9cfcc6b8ea0653b26972918292de432842398c446e9830f51ed6ca4c0aa581bdd32fd739

  • SSDEEP

    12288:dTSy59SLWy5jy59SL3y59Ey59SLAy59SLZy5iy59SL:dTSy7oWypy7o3y7Ey7oAy7oZyUy7o

Score
10/10
persistence

Malware Config

Targets

    • Target

      08f2fbb2d4a012e867a4ac8ea8ef9790d8553f55691253daf169fc08a656ce02

    • Size

      385KB

    • MD5

      ccc9d7a04a112a61e2220246f8a25fcc

    • SHA1

      d1f983c9c21926dd9cc96d5ba68bd7243525b495

    • SHA256

      08f2fbb2d4a012e867a4ac8ea8ef9790d8553f55691253daf169fc08a656ce02

    • SHA512

      553ee38312857163897afab8f4f3f7a89f8d050d4947bdc25c5a453f9cfcc6b8ea0653b26972918292de432842398c446e9830f51ed6ca4c0aa581bdd32fd739

    • SSDEEP

      12288:dTSy59SLWy5jy59SL3y59Ey59SLAy59SLZy5iy59SL:dTSy7oWypy7o3y7Ey7oAy7oZyUy7o

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Detects executables built or packed with MPress PE compressor

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks