Overview

overview

10

Static

static

3

5dead658b8...ab.exe

windows7-x64

10

5dead658b8...ab.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5dead658b836d79e3db0f3f244db5a2b34c6904ba1a66ca20ab847dd869f6fab

  • Size

    480KB

  • Sample

    240528-1q75csfa49

  • MD5

    4d05fa85ec89893dd0d46e712397616c

  • SHA1

    7a3f27175de14275a9e833eee09a8342cdd540c3

  • SHA256

    5dead658b836d79e3db0f3f244db5a2b34c6904ba1a66ca20ab847dd869f6fab

  • SHA512

    3fa572e113727d18ae50aa67d2ca6bd74b1c62cd0d0471e6d3c0b89da169a7f391ca7576791c93cfedd076270b697e773bea2af8f5c94004489e011bc507d89e

  • SSDEEP

    6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDns:nRDc3yWDNU+YUznzNjElWaT07NQtDs

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5dead658b836d79e3db0f3f244db5a2b34c6904ba1a66ca20ab847dd869f6fab

    • Size

      480KB

    • MD5

      4d05fa85ec89893dd0d46e712397616c

    • SHA1

      7a3f27175de14275a9e833eee09a8342cdd540c3

    • SHA256

      5dead658b836d79e3db0f3f244db5a2b34c6904ba1a66ca20ab847dd869f6fab

    • SHA512

      3fa572e113727d18ae50aa67d2ca6bd74b1c62cd0d0471e6d3c0b89da169a7f391ca7576791c93cfedd076270b697e773bea2af8f5c94004489e011bc507d89e

    • SSDEEP

      6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDns:nRDc3yWDNU+YUznzNjElWaT07NQtDs

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks