Overview

overview

10

Static

static

3

06024bec06...25.exe

windows7-x64

10

06024bec06...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06024bec06fb17db8314ad5d506bc43d6ac6ee5ca56594aa25670e6943165025

  • Size

    41KB

  • Sample

    240523-wxmd1sbe8x

  • MD5

    00d8fb703a25b8455adbf6b33ecd0ff6

  • SHA1

    49f2bdb6b902bbe5024792ca6da9ca33d9d6083f

  • SHA256

    06024bec06fb17db8314ad5d506bc43d6ac6ee5ca56594aa25670e6943165025

  • SHA512

    755a7f2cce2a9834af190ce9d2c075a63ac108f688f5773cf7263f589e753243b4f8f4090e8b35cf5fda4f6b8b7111ff8268f0c8a03de0a899d3d2a2d37ae3c5

  • SSDEEP

    768:+iZNPp0b5BbrMVUTBv6mkZ8jA7IwnDoSdW:+WNBGBrM6Fv6mkqyoT

Score
10/10
persistence

Malware Config

Targets

    • Target

      06024bec06fb17db8314ad5d506bc43d6ac6ee5ca56594aa25670e6943165025

    • Size

      41KB

    • MD5

      00d8fb703a25b8455adbf6b33ecd0ff6

    • SHA1

      49f2bdb6b902bbe5024792ca6da9ca33d9d6083f

    • SHA256

      06024bec06fb17db8314ad5d506bc43d6ac6ee5ca56594aa25670e6943165025

    • SHA512

      755a7f2cce2a9834af190ce9d2c075a63ac108f688f5773cf7263f589e753243b4f8f4090e8b35cf5fda4f6b8b7111ff8268f0c8a03de0a899d3d2a2d37ae3c5

    • SSDEEP

      768:+iZNPp0b5BbrMVUTBv6mkZ8jA7IwnDoSdW:+WNBGBrM6Fv6mkqyoT

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Winlogon Helper DLL

1
T1547.004

Event Triggered Execution

1
T1546

Change Default File Association

1
T1546.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Winlogon Helper DLL

1
T1547.004

Event Triggered Execution

1
T1546

Change Default File Association

1
T1546.001

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks