Overview

overview

10

Static

static

3

b90de443a1...8a.exe

windows7-x64

10

b90de443a1...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b90de443a1dc15d3a09de4282bdfba987c4a9f5688b362fc8bb2e55271b4798a

  • Size

    96KB

  • Sample

    240524-cwrgssaa65

  • MD5

    566ca24af176061b67f000714c45021b

  • SHA1

    0b758e2e7333ac96abbc09c7946c0447d9687d16

  • SHA256

    b90de443a1dc15d3a09de4282bdfba987c4a9f5688b362fc8bb2e55271b4798a

  • SHA512

    d153575ecfb816a349fba6a198509ef0c92bb4e8d4dc36881e1cc6d002a42733761e5761c9fb83d2a1e14814c917a8c69d2b11caf2dd816126252821fe9730a0

  • SSDEEP

    1536:eLgWXMBQkFCNFozqv0tROv291KQcozezNBFDCILoNSbm2lhrUQVoMdUT+irF:qgWXMkn18tROv2CQXkDwmoNSFlhr1Rhk

Score
10/10
persistence

Malware Config

Targets

    • Target

      b90de443a1dc15d3a09de4282bdfba987c4a9f5688b362fc8bb2e55271b4798a

    • Size

      96KB

    • MD5

      566ca24af176061b67f000714c45021b

    • SHA1

      0b758e2e7333ac96abbc09c7946c0447d9687d16

    • SHA256

      b90de443a1dc15d3a09de4282bdfba987c4a9f5688b362fc8bb2e55271b4798a

    • SHA512

      d153575ecfb816a349fba6a198509ef0c92bb4e8d4dc36881e1cc6d002a42733761e5761c9fb83d2a1e14814c917a8c69d2b11caf2dd816126252821fe9730a0

    • SSDEEP

      1536:eLgWXMBQkFCNFozqv0tROv291KQcozezNBFDCILoNSbm2lhrUQVoMdUT+irF:qgWXMkn18tROv2CQXkDwmoNSFlhr1Rhk

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks