Overview

overview

10

Static

static

3

066046e2fc...ab.exe

windows7-x64

10

066046e2fc...ab.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    066046e2fc19cf8e3081709b516a1b4fc0fa8d8ffe64412179e9770c0fad40ab

  • Size

    264KB

  • Sample

    240523-wx32rsbf27

  • MD5

    a059e9b409277dccc03a4a10b7548d7a

  • SHA1

    806c149679c318ce446eea07ee6602a8cc814a0e

  • SHA256

    066046e2fc19cf8e3081709b516a1b4fc0fa8d8ffe64412179e9770c0fad40ab

  • SHA512

    f27a9ae63a8aa71a8d9dfd1ee2ae7e7f1c773c895fec141c1da6623c3b78625698c077bbf20cbf1e1ff90aee80971e94c0d5061bf35f155c1c784b21b2266dea

  • SSDEEP

    3072:8S2PeNKsevzSkDlSf24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtyF:D228vzScsFj5tPNki9HZd1sFj5tw

Score
10/10
persistence

Malware Config

Targets

    • Target

      066046e2fc19cf8e3081709b516a1b4fc0fa8d8ffe64412179e9770c0fad40ab

    • Size

      264KB

    • MD5

      a059e9b409277dccc03a4a10b7548d7a

    • SHA1

      806c149679c318ce446eea07ee6602a8cc814a0e

    • SHA256

      066046e2fc19cf8e3081709b516a1b4fc0fa8d8ffe64412179e9770c0fad40ab

    • SHA512

      f27a9ae63a8aa71a8d9dfd1ee2ae7e7f1c773c895fec141c1da6623c3b78625698c077bbf20cbf1e1ff90aee80971e94c0d5061bf35f155c1c784b21b2266dea

    • SSDEEP

      3072:8S2PeNKsevzSkDlSf24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtyF:D228vzScsFj5tPNki9HZd1sFj5tw

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks