Overview

overview

10

Static

static

3

697043b3fc...a2.exe

windows7-x64

10

697043b3fc...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    697043b3fcc6bab89f28c983043c8b91419a50844ece74ca292bfea1fcf6f7a2

  • Size

    207KB

  • Sample

    240601-2f3bssha7s

  • MD5

    442b2b41717ecb9da2258ba570ee7357

  • SHA1

    ae1b8da3e16582b8a6b6976d50e852c1873d87fa

  • SHA256

    697043b3fcc6bab89f28c983043c8b91419a50844ece74ca292bfea1fcf6f7a2

  • SHA512

    bf3b4408df0e1fb624f6d231fddad3ed8db51d3b8f09f8213b25c07f429aea75d567da89bc69d78e5859d663a57e5876e11ba9db50460fec334daf5841433985

  • SSDEEP

    3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLEkkkkkkkkkkkkkkkkkkkkD:5vEN2U+T6i5LirrllHy4HUcMQY6K8

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      697043b3fcc6bab89f28c983043c8b91419a50844ece74ca292bfea1fcf6f7a2

    • Size

      207KB

    • MD5

      442b2b41717ecb9da2258ba570ee7357

    • SHA1

      ae1b8da3e16582b8a6b6976d50e852c1873d87fa

    • SHA256

      697043b3fcc6bab89f28c983043c8b91419a50844ece74ca292bfea1fcf6f7a2

    • SHA512

      bf3b4408df0e1fb624f6d231fddad3ed8db51d3b8f09f8213b25c07f429aea75d567da89bc69d78e5859d663a57e5876e11ba9db50460fec334daf5841433985

    • SSDEEP

      3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLEkkkkkkkkkkkkkkkkkkkkD:5vEN2U+T6i5LirrllHy4HUcMQY6K8

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks