Overview

overview

10

Static

static

10

c8889f6548...2c.exe

windows7-x64

10

c8889f6548...2c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8889f65482106429a4e0d690a2057f6499acc52036c6c73b6cf679bba1b052c

  • Size

    176KB

  • Sample

    240524-dqkbzaba9x

  • MD5

    5e6ac9ac490192829c82cd7c2ecdb859

  • SHA1

    707f43796a680a55378ac59af0289cca7c106545

  • SHA256

    c8889f65482106429a4e0d690a2057f6499acc52036c6c73b6cf679bba1b052c

  • SHA512

    5133c305e63d2d92f5f6fa99c1616a8ce4c1fd8c19fe3c0d8ec3ebfb3f27c89ad7848417459380b16c4b9c1ef1e215d98478e58c5e02dda3d8e4916a4684987c

  • SSDEEP

    3072:saagEQjPahZOYedAarlOGA8d2E2fAYjmjRrz3E3:EgEYYEARXE2fAEG4

Score
10/10
persistence

Malware Config

Targets

    • Target

      c8889f65482106429a4e0d690a2057f6499acc52036c6c73b6cf679bba1b052c

    • Size

      176KB

    • MD5

      5e6ac9ac490192829c82cd7c2ecdb859

    • SHA1

      707f43796a680a55378ac59af0289cca7c106545

    • SHA256

      c8889f65482106429a4e0d690a2057f6499acc52036c6c73b6cf679bba1b052c

    • SHA512

      5133c305e63d2d92f5f6fa99c1616a8ce4c1fd8c19fe3c0d8ec3ebfb3f27c89ad7848417459380b16c4b9c1ef1e215d98478e58c5e02dda3d8e4916a4684987c

    • SSDEEP

      3072:saagEQjPahZOYedAarlOGA8d2E2fAYjmjRrz3E3:EgEYYEARXE2fAEG4

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks