Overview

overview

10

Static

static

3

a18a85f4b0...cd.exe

windows7-x64

10

a18a85f4b0...cd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a18a85f4b0311c6a8a2b3231dca62fb4107166093f127ae5cf3ca2424e2ff9cd

  • Size

    66KB

  • Sample

    240528-bthw7saf73

  • MD5

    9dbb6dbe8b8dfee1ebe870bc08491241

  • SHA1

    fa86331570229127b334124b6d87f273090425bd

  • SHA256

    a18a85f4b0311c6a8a2b3231dca62fb4107166093f127ae5cf3ca2424e2ff9cd

  • SHA512

    d4e77c81cfb067e997f329cf5c76ecf53568923fafcfc3aa9a6bd45a0c4d2d76d884c21374edb6117818e28ccf2baa9089fb11bda1fd206287a64d90b03c175b

  • SSDEEP

    1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXiuUTUTUTUTUTUTUTUTUTUTj:IeklMMYJhqezw/pXzH9ihAAAAAAAAAAW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a18a85f4b0311c6a8a2b3231dca62fb4107166093f127ae5cf3ca2424e2ff9cd

    • Size

      66KB

    • MD5

      9dbb6dbe8b8dfee1ebe870bc08491241

    • SHA1

      fa86331570229127b334124b6d87f273090425bd

    • SHA256

      a18a85f4b0311c6a8a2b3231dca62fb4107166093f127ae5cf3ca2424e2ff9cd

    • SHA512

      d4e77c81cfb067e997f329cf5c76ecf53568923fafcfc3aa9a6bd45a0c4d2d76d884c21374edb6117818e28ccf2baa9089fb11bda1fd206287a64d90b03c175b

    • SSDEEP

      1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXiuUTUTUTUTUTUTUTUTUTUTj:IeklMMYJhqezw/pXzH9ihAAAAAAAAAAW

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks