Overview

overview

10

Static

static

3

2e4b2f43be...02.exe

windows7-x64

10

2e4b2f43be...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e4b2f43beb1ccd3edf38c7ce2ed229a5dedfa33a5fbca468b0830f6cb793002

  • Size

    704KB

  • Sample

    240629-ykawkaxhln

  • MD5

    d79a171887427b6402a341b79a7c7509

  • SHA1

    ce9c96d926f9eaa450db2e7ec350a281041d2b72

  • SHA256

    2e4b2f43beb1ccd3edf38c7ce2ed229a5dedfa33a5fbca468b0830f6cb793002

  • SHA512

    0a4a4b4cf1b8d69da3a976ceb7a553bb5dfef4b93bc4cb39dade67fc474a93e1e321ab295e6464451224a5dedd2e2e18694f06ad192edcae3427541bcb546c00

  • SSDEEP

    12288:RxDCfp5fwQb45fwPPh2kkkkK4kXkkkkkkkkl888888888888888888nusMH0QiRs:RxDCfp5fB45foPh2kkkkK4kXkkkkkkkD

Score
10/10
persistence

Malware Config

Targets

    • Target

      2e4b2f43beb1ccd3edf38c7ce2ed229a5dedfa33a5fbca468b0830f6cb793002

    • Size

      704KB

    • MD5

      d79a171887427b6402a341b79a7c7509

    • SHA1

      ce9c96d926f9eaa450db2e7ec350a281041d2b72

    • SHA256

      2e4b2f43beb1ccd3edf38c7ce2ed229a5dedfa33a5fbca468b0830f6cb793002

    • SHA512

      0a4a4b4cf1b8d69da3a976ceb7a553bb5dfef4b93bc4cb39dade67fc474a93e1e321ab295e6464451224a5dedd2e2e18694f06ad192edcae3427541bcb546c00

    • SSDEEP

      12288:RxDCfp5fwQb45fwPPh2kkkkK4kXkkkkkkkkl888888888888888888nusMH0QiRs:RxDCfp5fB45foPh2kkkkK4kXkkkkkkkD

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks