Overview

overview

7

Static

static

3

b9c098521e...2e.exe

windows7-x64

7

b9c098521e...2e.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9c098521e030d2fbc3625e8f61633e40a3e9d6f714ba2a022cb4a73d6772d2e

  • Size

    79KB

  • Sample

    240524-dh5myaah78

  • MD5

    61b858a3de6f49413c14d1f2082287e3

  • SHA1

    3bb7b3bdd1af1ef1b371f91c5bc16d82fb8c1f80

  • SHA256

    b9c098521e030d2fbc3625e8f61633e40a3e9d6f714ba2a022cb4a73d6772d2e

  • SHA512

    f6263357f97326f1c8930369da4f355377bd107994d5736727c7e593bed9d9ede593aa959a3349c29e90444f508ee40701cb748bb14f4203abd5c6d67a8e3273

  • SSDEEP

    1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOKB5ogV:GhfxHNIreQm+HixB5ogV

Score
7/10
persistence

Malware Config

Targets

    • Target

      b9c098521e030d2fbc3625e8f61633e40a3e9d6f714ba2a022cb4a73d6772d2e

    • Size

      79KB

    • MD5

      61b858a3de6f49413c14d1f2082287e3

    • SHA1

      3bb7b3bdd1af1ef1b371f91c5bc16d82fb8c1f80

    • SHA256

      b9c098521e030d2fbc3625e8f61633e40a3e9d6f714ba2a022cb4a73d6772d2e

    • SHA512

      f6263357f97326f1c8930369da4f355377bd107994d5736727c7e593bed9d9ede593aa959a3349c29e90444f508ee40701cb748bb14f4203abd5c6d67a8e3273

    • SSDEEP

      1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOKB5ogV:GhfxHNIreQm+HixB5ogV

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Event Triggered Execution

1
T1546

Change Default File Association

1
T1546.001

Privilege Escalation

Event Triggered Execution

1
T1546

Change Default File Association

1
T1546.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks