Overview

overview

10

Static

static

3

cee5050e27...65.exe

windows7-x64

10

cee5050e27...65.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cee5050e27da379c7b9a44e9dd8f16e9792e2e958d36610cf475d80fe9f17e65

  • Size

    211KB

  • Sample

    240611-dyw1qstamk

  • MD5

    df4545cef58f21d0d9efa10559dd6b9a

  • SHA1

    d2301ead7d85593b01f3098b802142cd17e9e5b4

  • SHA256

    cee5050e27da379c7b9a44e9dd8f16e9792e2e958d36610cf475d80fe9f17e65

  • SHA512

    913125b399c9f4b7976f9f1aa18c94f508c60f20d50479ee3fdd8fd5a0ae093e77e25420c920982be86989c139036a2edc465bed19b52f1b6e55a8da61683229

  • SSDEEP

    3072:JD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqOC:Jh8cBzHLRMpZ4d1ZC

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cee5050e27da379c7b9a44e9dd8f16e9792e2e958d36610cf475d80fe9f17e65

    • Size

      211KB

    • MD5

      df4545cef58f21d0d9efa10559dd6b9a

    • SHA1

      d2301ead7d85593b01f3098b802142cd17e9e5b4

    • SHA256

      cee5050e27da379c7b9a44e9dd8f16e9792e2e958d36610cf475d80fe9f17e65

    • SHA512

      913125b399c9f4b7976f9f1aa18c94f508c60f20d50479ee3fdd8fd5a0ae093e77e25420c920982be86989c139036a2edc465bed19b52f1b6e55a8da61683229

    • SSDEEP

      3072:JD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqOC:Jh8cBzHLRMpZ4d1ZC

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks