Overview

overview

10

Static

static

10

4b70169cbd...ba.exe

windows7-x64

10

4b70169cbd...ba.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b70169cbdf2bbb0d5956953d01de8c082cb3289f63338fc344ec9b9e6a0daba

  • Size

    344KB

  • Sample

    240608-2y3qaahf5x

  • MD5

    66f6231dec5912755d30b244ec06c590

  • SHA1

    49a400b80ec73e5df19c1919baf53ed8d7d9c2d1

  • SHA256

    4b70169cbdf2bbb0d5956953d01de8c082cb3289f63338fc344ec9b9e6a0daba

  • SHA512

    91189aa7eea5e7db74ae792fb62d916d4571da263a60e03543f88b2ae3521e5ba48b7c322a6553470be0f5b7a9d39298514678477e17b232975fb12dea4c9404

  • SSDEEP

    6144:plybtHpmCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:ubtkCpXImbzQD6OkPgl6bmIjKn

Score
10/10
persistence

Malware Config

Targets

    • Target

      4b70169cbdf2bbb0d5956953d01de8c082cb3289f63338fc344ec9b9e6a0daba

    • Size

      344KB

    • MD5

      66f6231dec5912755d30b244ec06c590

    • SHA1

      49a400b80ec73e5df19c1919baf53ed8d7d9c2d1

    • SHA256

      4b70169cbdf2bbb0d5956953d01de8c082cb3289f63338fc344ec9b9e6a0daba

    • SHA512

      91189aa7eea5e7db74ae792fb62d916d4571da263a60e03543f88b2ae3521e5ba48b7c322a6553470be0f5b7a9d39298514678477e17b232975fb12dea4c9404

    • SSDEEP

      6144:plybtHpmCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:ubtkCpXImbzQD6OkPgl6bmIjKn

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks