Overview

overview

10

Static

static

10

b7fb044482...56.exe

windows7-x64

10

b7fb044482...56.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7fb044482ddbeb7c2a0628a46c8579344705eb66cecdcd4b667ca68e21b9356

  • Size

    439KB

  • Sample

    240524-csf7nahh21

  • MD5

    2b288264f7b81c5a469334f795fb8eac

  • SHA1

    4c13a736135cf2a82f2086b7dad8af54d38ee8cb

  • SHA256

    b7fb044482ddbeb7c2a0628a46c8579344705eb66cecdcd4b667ca68e21b9356

  • SHA512

    cc953d31e6b9e26a2e45101ce1cb8232b8925ff48789586271772a73d713513d000c5bda017511fe56f8fb05c858ed72699842347aaf1b37dc90e3c774fbc944

  • SSDEEP

    12288:MBOPeKm2OPeKm22Vtp90NtmVtp90NtXONt:fpEkpEY

Score
10/10
persistence

Malware Config

Targets

    • Target

      b7fb044482ddbeb7c2a0628a46c8579344705eb66cecdcd4b667ca68e21b9356

    • Size

      439KB

    • MD5

      2b288264f7b81c5a469334f795fb8eac

    • SHA1

      4c13a736135cf2a82f2086b7dad8af54d38ee8cb

    • SHA256

      b7fb044482ddbeb7c2a0628a46c8579344705eb66cecdcd4b667ca68e21b9356

    • SHA512

      cc953d31e6b9e26a2e45101ce1cb8232b8925ff48789586271772a73d713513d000c5bda017511fe56f8fb05c858ed72699842347aaf1b37dc90e3c774fbc944

    • SSDEEP

      12288:MBOPeKm2OPeKm22Vtp90NtmVtp90NtXONt:fpEkpEY

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Detects executables packed with ConfuserEx Mod

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks