Overview

overview

10

Static

static

3

4d9c90764d...ef.exe

windows7-x64

10

4d9c90764d...ef.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4d9c90764d8f463c1b9b83242638bc350798a1d994887ce7820ac97aa3aa99ef

  • Size

    66KB

  • Sample

    240605-2jb9saah7s

  • MD5

    cfb9dfdcce2c43a8dfd818fb3a916465

  • SHA1

    8db58dc2c8751e108a0e98fd45c9e6452912924d

  • SHA256

    4d9c90764d8f463c1b9b83242638bc350798a1d994887ce7820ac97aa3aa99ef

  • SHA512

    89ebf9aa442adbd6e5b5a734cb8510a1665c343a019cfa88b70735efefff44545faad023e6b5594b4887a439a1e83c19c35d8f69aa3082258bc1f5049e4f2c5c

  • SSDEEP

    1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXig:IeklMMYJhqezw/pXzH9ig

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4d9c90764d8f463c1b9b83242638bc350798a1d994887ce7820ac97aa3aa99ef

    • Size

      66KB

    • MD5

      cfb9dfdcce2c43a8dfd818fb3a916465

    • SHA1

      8db58dc2c8751e108a0e98fd45c9e6452912924d

    • SHA256

      4d9c90764d8f463c1b9b83242638bc350798a1d994887ce7820ac97aa3aa99ef

    • SHA512

      89ebf9aa442adbd6e5b5a734cb8510a1665c343a019cfa88b70735efefff44545faad023e6b5594b4887a439a1e83c19c35d8f69aa3082258bc1f5049e4f2c5c

    • SSDEEP

      1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXig:IeklMMYJhqezw/pXzH9ig

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks