Overview

overview

10

Static

static

3

24965fe68a...40.exe

windows7-x64

10

24965fe68a...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24965fe68a669f17d5a5e7aee73c302975c321174a415547a08d997b0e4d2840

  • Size

    206KB

  • Sample

    240530-yk1f8agh3t

  • MD5

    3ad30b1b56f433615b64107644c2cedf

  • SHA1

    3c9cc9693dd1eed23151cc923eafc27fef35c9fe

  • SHA256

    24965fe68a669f17d5a5e7aee73c302975c321174a415547a08d997b0e4d2840

  • SHA512

    0f4b41c007055c69d0e11646b10d8f33ac0c3e623fa18c1cec3f4210ca15ab2b0fc4e62bb0ec394aae841baf20774115e56260e29086dd9b155daec86006eb1f

  • SSDEEP

    3072:YvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unpxxxxxxxxxxxxxxxxxxxxxZ:YvEN2U+T6i5LirrllHy4HUcMQY6c

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      24965fe68a669f17d5a5e7aee73c302975c321174a415547a08d997b0e4d2840

    • Size

      206KB

    • MD5

      3ad30b1b56f433615b64107644c2cedf

    • SHA1

      3c9cc9693dd1eed23151cc923eafc27fef35c9fe

    • SHA256

      24965fe68a669f17d5a5e7aee73c302975c321174a415547a08d997b0e4d2840

    • SHA512

      0f4b41c007055c69d0e11646b10d8f33ac0c3e623fa18c1cec3f4210ca15ab2b0fc4e62bb0ec394aae841baf20774115e56260e29086dd9b155daec86006eb1f

    • SSDEEP

      3072:YvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unpxxxxxxxxxxxxxxxxxxxxxZ:YvEN2U+T6i5LirrllHy4HUcMQY6c

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks