Overview

overview

10

Static

static

3

Bat.Win Fr...er.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Bat.Win Free Spoofer.exe

  • Size

    639KB

  • Sample

    240627-1fpj9sscnc

  • MD5

    34869a88e94bd7ebe59579d964da7406

  • SHA1

    9f106c97c68f51d15ef74d82646c8b56aabe6caa

  • SHA256

    22f8ca9f3baeccccebf07b25c1713771a97c8e71d9fc39670fa15ccc4ad24c79

  • SHA512

    629d87de8b0456e721091a4e5ffbc5b8a6c2378bb769ae005ce311a6436c84df2c697881f1a25bfc60acb3b162ad5c4332ecbc1d725846539e300b36c7042eb6

  • SSDEEP

    12288:PFUNDafZi7z473/3cawyhgy8AzQB98PfjOAL:PFOafZe47PMmtqxAL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      Bat.Win Free Spoofer.exe

    • Size

      639KB

    • MD5

      34869a88e94bd7ebe59579d964da7406

    • SHA1

      9f106c97c68f51d15ef74d82646c8b56aabe6caa

    • SHA256

      22f8ca9f3baeccccebf07b25c1713771a97c8e71d9fc39670fa15ccc4ad24c79

    • SHA512

      629d87de8b0456e721091a4e5ffbc5b8a6c2378bb769ae005ce311a6436c84df2c697881f1a25bfc60acb3b162ad5c4332ecbc1d725846539e300b36c7042eb6

    • SSDEEP

      12288:PFUNDafZi7z473/3cawyhgy8AzQB98PfjOAL:PFOafZe47PMmtqxAL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks