Overview

overview

10

Static

static

3

2ddd7ed523...02.exe

windows7-x64

10

2ddd7ed523...02.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ddd7ed52302eb0e06f7bd7fd5664b92d6edf2630d336cf9bf28fd1cc464fe02

  • Size

    206KB

  • Sample

    240608-zqp34sgh49

  • MD5

    de0fe051755af4bdd50134a3f8e4b558

  • SHA1

    864df4511f5608dc5ada2ddbeed621e4b9ec8686

  • SHA256

    2ddd7ed52302eb0e06f7bd7fd5664b92d6edf2630d336cf9bf28fd1cc464fe02

  • SHA512

    6820e99a2f6ac1d611f91a1c21f5b8b4a29be42cf5bf94be589190443c0b930541ba8ece02ebc0f7dd7d9b505e155f725af18b4f0d0c9667200ada2ec56d090d

  • SSDEEP

    3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unc:zvEN2U+T6i5LirrllHy4HUcMQY6v

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2ddd7ed52302eb0e06f7bd7fd5664b92d6edf2630d336cf9bf28fd1cc464fe02

    • Size

      206KB

    • MD5

      de0fe051755af4bdd50134a3f8e4b558

    • SHA1

      864df4511f5608dc5ada2ddbeed621e4b9ec8686

    • SHA256

      2ddd7ed52302eb0e06f7bd7fd5664b92d6edf2630d336cf9bf28fd1cc464fe02

    • SHA512

      6820e99a2f6ac1d611f91a1c21f5b8b4a29be42cf5bf94be589190443c0b930541ba8ece02ebc0f7dd7d9b505e155f725af18b4f0d0c9667200ada2ec56d090d

    • SSDEEP

      3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unc:zvEN2U+T6i5LirrllHy4HUcMQY6v

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks