Overview

overview

10

Static

static

3

6c32b6772b...76.exe

windows7-x64

10

6c32b6772b...76.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6c32b6772ba728b454ebf501b8cda837ccce53a684b5f1e994bcc0c3ec674176

  • Size

    65KB

  • Sample

    240529-2pt2sadf47

  • MD5

    9a7e1b5d1372fa5e4be0dd9ad56c1dbf

  • SHA1

    1065283b3afa234aba38e96642effe5c5dc4069d

  • SHA256

    6c32b6772ba728b454ebf501b8cda837ccce53a684b5f1e994bcc0c3ec674176

  • SHA512

    5a854aa42ff1f97446cc1a478627120f5a52058a5b7b32e2f56e7389676b32c598400b5e89a83e417d9c57df3c4fc7147f4855a9f74eab7bd6a1ba7947590373

  • SSDEEP

    1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/OuV:7WNqkOJWmo1HpM0MkTUmuV

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6c32b6772ba728b454ebf501b8cda837ccce53a684b5f1e994bcc0c3ec674176

    • Size

      65KB

    • MD5

      9a7e1b5d1372fa5e4be0dd9ad56c1dbf

    • SHA1

      1065283b3afa234aba38e96642effe5c5dc4069d

    • SHA256

      6c32b6772ba728b454ebf501b8cda837ccce53a684b5f1e994bcc0c3ec674176

    • SHA512

      5a854aa42ff1f97446cc1a478627120f5a52058a5b7b32e2f56e7389676b32c598400b5e89a83e417d9c57df3c4fc7147f4855a9f74eab7bd6a1ba7947590373

    • SSDEEP

      1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/OuV:7WNqkOJWmo1HpM0MkTUmuV

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks