Overview

overview

10

Static

static

3

ee22b932d5...47.exe

windows7-x64

10

ee22b932d5...47.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee22b932d5b026bf532247a1b357640a5061ab7be9d543b8a6dcb6e224f75a47

  • Size

    199KB

  • Sample

    240525-gasj7aga4v

  • MD5

    75c53cf43723dcc2ba3a9aa37529cfeb

  • SHA1

    db05fc6d135fef79c3fad9180ec423a95bfaad44

  • SHA256

    ee22b932d5b026bf532247a1b357640a5061ab7be9d543b8a6dcb6e224f75a47

  • SHA512

    8dd3be10e4216b666681d9936ca84298a5c5c732b96291b1f80f34c4ff32183f705253711ce455a1cb70da349cae47b3ac269df740c25932b2237cd736a45a43

  • SSDEEP

    3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6u4PmuT:7vEN2U+T6i5LirrllHy4HUcMQY6V

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ee22b932d5b026bf532247a1b357640a5061ab7be9d543b8a6dcb6e224f75a47

    • Size

      199KB

    • MD5

      75c53cf43723dcc2ba3a9aa37529cfeb

    • SHA1

      db05fc6d135fef79c3fad9180ec423a95bfaad44

    • SHA256

      ee22b932d5b026bf532247a1b357640a5061ab7be9d543b8a6dcb6e224f75a47

    • SHA512

      8dd3be10e4216b666681d9936ca84298a5c5c732b96291b1f80f34c4ff32183f705253711ce455a1cb70da349cae47b3ac269df740c25932b2237cd736a45a43

    • SSDEEP

      3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6u4PmuT:7vEN2U+T6i5LirrllHy4HUcMQY6V

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks