Overview

overview

10

Static

static

10

69a99a9ee3...b9.exe

windows7-x64

10

69a99a9ee3...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69a99a9ee3eb585911b3dd48fa1c269806929070209366fbea650b2aa8729bb9

  • Size

    207KB

  • Sample

    240628-2lv5nsxckl

  • MD5

    69844c072f275ed9808daa6b6410e329

  • SHA1

    be4592ffdb3ec51bfcc9e10a4d86a8f5ffb6def0

  • SHA256

    69a99a9ee3eb585911b3dd48fa1c269806929070209366fbea650b2aa8729bb9

  • SHA512

    f1ffe3a4d720b28c14bbe28cf24507b8a6aed631dce9412a4a2243c8607e7d9d0cd046580ca1f67d5b5063acac9bc221a16bf0de93b0eee798342dcc8b5b728d

  • SSDEEP

    6144:cidL+HyYuD4/OOqOOOOOOOOOOOOOOgOOOOOOOQOOOOOCGG3Vjj+VPj92d62ASOwj:9cS4OOqOOOOOOOOOOOOOOgOOOOOOOQOw

Score
10/10
persistence

Malware Config

Targets

    • Target

      69a99a9ee3eb585911b3dd48fa1c269806929070209366fbea650b2aa8729bb9

    • Size

      207KB

    • MD5

      69844c072f275ed9808daa6b6410e329

    • SHA1

      be4592ffdb3ec51bfcc9e10a4d86a8f5ffb6def0

    • SHA256

      69a99a9ee3eb585911b3dd48fa1c269806929070209366fbea650b2aa8729bb9

    • SHA512

      f1ffe3a4d720b28c14bbe28cf24507b8a6aed631dce9412a4a2243c8607e7d9d0cd046580ca1f67d5b5063acac9bc221a16bf0de93b0eee798342dcc8b5b728d

    • SSDEEP

      6144:cidL+HyYuD4/OOqOOOOOOOOOOOOOOgOOOOOOOQOOOOOCGG3Vjj+VPj92d62ASOwj:9cS4OOqOOOOOOOOOOOOOOgOOOOOOOQOw

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks