Overview

overview

10

Static

static

3

b6d487b007...6e.exe

windows7-x64

10

b6d487b007...6e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b6d487b0079c947f8bf77a137f105ca28a0f1a48932518d1e9dfb39f69e4846e

  • Size

    192KB

  • Sample

    240610-ttlbfatcmk

  • MD5

    c604139c012dd07d7f1f582782818c0c

  • SHA1

    9f51c547d826554844926a5e58806ff908a5109b

  • SHA256

    b6d487b0079c947f8bf77a137f105ca28a0f1a48932518d1e9dfb39f69e4846e

  • SHA512

    a64c37e4990b24e4b8a28388bc9680c3ca2d48aaf1f13ecdc54c4ee01235e497d918b64c900537e6b193c6469af4e98505141825a1f242b85aa783664a8799f7

  • SSDEEP

    3072:K6fB1hjpYa3BtLwQSWWDcUQnpiUgLQCOOwQzDd1AZoUBW3FJeRuaWNXmgu+tAcrp:K6fB1ppBh4OOwQndWZHEFJ7aWN1rtMsP

Score
10/10
persistence

Malware Config

Targets

    • Target

      b6d487b0079c947f8bf77a137f105ca28a0f1a48932518d1e9dfb39f69e4846e

    • Size

      192KB

    • MD5

      c604139c012dd07d7f1f582782818c0c

    • SHA1

      9f51c547d826554844926a5e58806ff908a5109b

    • SHA256

      b6d487b0079c947f8bf77a137f105ca28a0f1a48932518d1e9dfb39f69e4846e

    • SHA512

      a64c37e4990b24e4b8a28388bc9680c3ca2d48aaf1f13ecdc54c4ee01235e497d918b64c900537e6b193c6469af4e98505141825a1f242b85aa783664a8799f7

    • SSDEEP

      3072:K6fB1hjpYa3BtLwQSWWDcUQnpiUgLQCOOwQzDd1AZoUBW3FJeRuaWNXmgu+tAcrp:K6fB1ppBh4OOwQndWZHEFJ7aWN1rtMsP

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks