Overview

overview

10

Static

static

3

ce068b9ed5...5b.exe

windows7-x64

10

ce068b9ed5...5b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce068b9ed554b3344884e2899130dcf4bd727f5684b52dc6629ab3095d63aa5b

  • Size

    2.5MB

  • Sample

    240524-d1y8wabd6v

  • MD5

    c852087b5e59ae1ce9a9825065435c26

  • SHA1

    4ab23d6ba26b222149639b038798aed75bbb2a67

  • SHA256

    ce068b9ed554b3344884e2899130dcf4bd727f5684b52dc6629ab3095d63aa5b

  • SHA512

    330991fda7f551d3ffec46294e6d175db44e5ac896d72a1f8c08a23266b04dbda3e20a5763f83b07c820b0951bb56725e8fbdb55904cbc520c8eb656fd902a3d

  • SSDEEP

    12288:avEKiHkY660JVaw0HBHOehl0oDL/eToo5Li2:aMKiHgdVaw0HBFhWof/0o8

Score
10/10
persistence

Malware Config

Targets

    • Target

      ce068b9ed554b3344884e2899130dcf4bd727f5684b52dc6629ab3095d63aa5b

    • Size

      2.5MB

    • MD5

      c852087b5e59ae1ce9a9825065435c26

    • SHA1

      4ab23d6ba26b222149639b038798aed75bbb2a67

    • SHA256

      ce068b9ed554b3344884e2899130dcf4bd727f5684b52dc6629ab3095d63aa5b

    • SHA512

      330991fda7f551d3ffec46294e6d175db44e5ac896d72a1f8c08a23266b04dbda3e20a5763f83b07c820b0951bb56725e8fbdb55904cbc520c8eb656fd902a3d

    • SSDEEP

      12288:avEKiHkY660JVaw0HBHOehl0oDL/eToo5Li2:aMKiHgdVaw0HBFhWof/0o8

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks