Overview

overview

10

Static

static

3

06d70b93ea...0a.exe

windows7-x64

10

06d70b93ea...0a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06d70b93eae9a975ada2ac26c89c0a5d6357f80920cd7aec88feaec712b35d0a

  • Size

    844KB

  • Sample

    240523-wyqg3abf3x

  • MD5

    2e1e255c43f95ac33586476ab2cf071b

  • SHA1

    6f2d9d41f9d23ab68597391aea61a5d8015895b9

  • SHA256

    06d70b93eae9a975ada2ac26c89c0a5d6357f80920cd7aec88feaec712b35d0a

  • SHA512

    241b8cd5ea7ba9399aae7fffa7af6022ef2691733e294305b9d08aef2e6a2df989a0465fa1b9ea2d2b0329049f71775569aaad3a10ad4db97efcc62a7461980a

  • SSDEEP

    24576:71bH5W3TnbQihMpQnqrdX72LbY6x46uR/qYglMi:7NH5W3TbQihw+cdX2x46uhqllMi

Score
10/10
persistence

Malware Config

Targets

    • Target

      06d70b93eae9a975ada2ac26c89c0a5d6357f80920cd7aec88feaec712b35d0a

    • Size

      844KB

    • MD5

      2e1e255c43f95ac33586476ab2cf071b

    • SHA1

      6f2d9d41f9d23ab68597391aea61a5d8015895b9

    • SHA256

      06d70b93eae9a975ada2ac26c89c0a5d6357f80920cd7aec88feaec712b35d0a

    • SHA512

      241b8cd5ea7ba9399aae7fffa7af6022ef2691733e294305b9d08aef2e6a2df989a0465fa1b9ea2d2b0329049f71775569aaad3a10ad4db97efcc62a7461980a

    • SSDEEP

      24576:71bH5W3TnbQihMpQnqrdX72LbY6x46uR/qYglMi:7NH5W3TbQihw+cdX2x46uhqllMi

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks