Overview

overview

10

Static

static

3

393399c06b...95.exe

windows7-x64

10

393399c06b...95.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    393399c06b608319caf6585a3eda855d61cbb4dcb6e953561c41919a0dc34f95

  • Size

    206KB

  • Sample

    240610-mbmyzsff51

  • MD5

    86990fbac7d1ff8eac154565608d8057

  • SHA1

    d883bd02fa05c27f40c5889c3661c3234c3d9640

  • SHA256

    393399c06b608319caf6585a3eda855d61cbb4dcb6e953561c41919a0dc34f95

  • SHA512

    f90911918764d68578c496543cc3aab914017367bba4b5fa76bd19e6ca8a7f9344ab444ef0655d2a8501b85aa875dd6b2ae758f9ec17d203ae282c4c2e9af4e8

  • SSDEEP

    3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLf:5vEN2U+T6i5LirrllHy4HUcMQY6Kf

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      393399c06b608319caf6585a3eda855d61cbb4dcb6e953561c41919a0dc34f95

    • Size

      206KB

    • MD5

      86990fbac7d1ff8eac154565608d8057

    • SHA1

      d883bd02fa05c27f40c5889c3661c3234c3d9640

    • SHA256

      393399c06b608319caf6585a3eda855d61cbb4dcb6e953561c41919a0dc34f95

    • SHA512

      f90911918764d68578c496543cc3aab914017367bba4b5fa76bd19e6ca8a7f9344ab444ef0655d2a8501b85aa875dd6b2ae758f9ec17d203ae282c4c2e9af4e8

    • SSDEEP

      3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLf:5vEN2U+T6i5LirrllHy4HUcMQY6Kf

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks