Overview

overview

10

Static

static

3

a0f13bd9b0...4d.exe

windows7-x64

10

a0f13bd9b0...4d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0f13bd9b0bf00eed35199092805f97b3ae14b23d0d22b6fdd856c86da2cb94d.exe

  • Size

    344KB

  • Sample

    240524-ef7vyscb5v

  • MD5

    165a844c8d65f462912cc49cb5264be0

  • SHA1

    d01b6f54d6f50eeae3b8577d71e8d67655d89ed3

  • SHA256

    a0f13bd9b0bf00eed35199092805f97b3ae14b23d0d22b6fdd856c86da2cb94d

  • SHA512

    e603c0ea875332ae6afd3bbbbf921d9ac2a7fbaed481fd80dbc70cc9dd492df924beb75ef3c99c20f90742375d8df7f6f4bc362fde91fb85e5fabdecef0d6066

  • SSDEEP

    6144:dF5G+0meCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:stCpXImbzQD6OkPgl6bmIjKn

Score
10/10
persistence

Malware Config

Targets

    • Target

      a0f13bd9b0bf00eed35199092805f97b3ae14b23d0d22b6fdd856c86da2cb94d.exe

    • Size

      344KB

    • MD5

      165a844c8d65f462912cc49cb5264be0

    • SHA1

      d01b6f54d6f50eeae3b8577d71e8d67655d89ed3

    • SHA256

      a0f13bd9b0bf00eed35199092805f97b3ae14b23d0d22b6fdd856c86da2cb94d

    • SHA512

      e603c0ea875332ae6afd3bbbbf921d9ac2a7fbaed481fd80dbc70cc9dd492df924beb75ef3c99c20f90742375d8df7f6f4bc362fde91fb85e5fabdecef0d6066

    • SSDEEP

      6144:dF5G+0meCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:stCpXImbzQD6OkPgl6bmIjKn

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks