Overview

overview

10

Static

static

3

d3300bb3e7...5a.exe

windows7-x64

10

d3300bb3e7...5a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3300bb3e7d4b8b970059f6f2d81ce698532268fae347290d5b069117ab7b55a

  • Size

    1.9MB

  • Sample

    240524-earxjsbg6w

  • MD5

    041a2db7aeca049cecec0f0b691e854d

  • SHA1

    abfa8a9fe1b64669844fd6717350c0d744bafbc9

  • SHA256

    d3300bb3e7d4b8b970059f6f2d81ce698532268fae347290d5b069117ab7b55a

  • SHA512

    6c13d1023c8748849f192cf94e03ff54f9abd0eae699db4efcecb300411a9e8e68e763c925a689890e29026d60afc4b4854b293dc7251919e9e783c04919b4cb

  • SSDEEP

    24576:ZNIVyeNIVy2jUKaNIVyeNIVy2jUtc9uO2NIVyeNIVy2jUKaNIVyeNIVy2jUO:8yj1yj3uOpyj1yjH

Score
10/10
persistence

Malware Config

Targets

    • Target

      d3300bb3e7d4b8b970059f6f2d81ce698532268fae347290d5b069117ab7b55a

    • Size

      1.9MB

    • MD5

      041a2db7aeca049cecec0f0b691e854d

    • SHA1

      abfa8a9fe1b64669844fd6717350c0d744bafbc9

    • SHA256

      d3300bb3e7d4b8b970059f6f2d81ce698532268fae347290d5b069117ab7b55a

    • SHA512

      6c13d1023c8748849f192cf94e03ff54f9abd0eae699db4efcecb300411a9e8e68e763c925a689890e29026d60afc4b4854b293dc7251919e9e783c04919b4cb

    • SSDEEP

      24576:ZNIVyeNIVy2jUKaNIVyeNIVy2jUtc9uO2NIVyeNIVy2jUKaNIVyeNIVy2jUO:8yj1yj3uOpyj1yjH

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks