Overview

overview

10

Static

static

3

bd1268a8db...b4.exe

windows7-x64

10

bd1268a8db...b4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd1268a8db8b5c95dab236706552420759618745c1e3848df8ec215acff608b4

  • Size

    448KB

  • Sample

    240524-c24pbaac44

  • MD5

    5a646c55d29823228f2684175d73f20d

  • SHA1

    ec570d1edf2687c472186ec64c0e1187f1f9b2f4

  • SHA256

    bd1268a8db8b5c95dab236706552420759618745c1e3848df8ec215acff608b4

  • SHA512

    62e99f2c59206b17b11fd38bbd18c22d5e26e1009ddec76d31b197a182272b2be1414ff746c259c91796e2ffc5f3726023c220733bc049df2bdc445a8e124e14

  • SSDEEP

    6144:jTMSwVmu7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:jTL47aOlxzr3cOK3TajRfXFMKNxC

Score
10/10
persistence

Malware Config

Targets

    • Target

      bd1268a8db8b5c95dab236706552420759618745c1e3848df8ec215acff608b4

    • Size

      448KB

    • MD5

      5a646c55d29823228f2684175d73f20d

    • SHA1

      ec570d1edf2687c472186ec64c0e1187f1f9b2f4

    • SHA256

      bd1268a8db8b5c95dab236706552420759618745c1e3848df8ec215acff608b4

    • SHA512

      62e99f2c59206b17b11fd38bbd18c22d5e26e1009ddec76d31b197a182272b2be1414ff746c259c91796e2ffc5f3726023c220733bc049df2bdc445a8e124e14

    • SSDEEP

      6144:jTMSwVmu7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:jTL47aOlxzr3cOK3TajRfXFMKNxC

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks