Overview

overview

10

Static

static

10

fabebec256...9b.exe

windows7-x64

10

fabebec256...9b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fabebec256582dbc073b7b109c6537e4fc1cd70a915542f29310448703b6bd9b

  • Size

    280KB

  • Sample

    240630-edsm9axbkr

  • MD5

    b0b4d37c71bd245b7a0aa19bfdef4f99

  • SHA1

    9e2361354d08096398e6abf9065b43f3c898c2a7

  • SHA256

    fabebec256582dbc073b7b109c6537e4fc1cd70a915542f29310448703b6bd9b

  • SHA512

    8416f308cd91be5667ec40c7118edd775e4860906d06c3ff6f57d187894f9057c35179f5a813b996ff2b36501aae51b917ac580b70d5c3cd0858edf0910d96e9

  • SSDEEP

    6144:Pf5T+PtH6ci/GOORjMmRUoooooooooooooooooooooooooy/G3:PFw1i//OVLCooooooooooooooooooooa

Score
10/10
persistence

Malware Config

Targets

    • Target

      fabebec256582dbc073b7b109c6537e4fc1cd70a915542f29310448703b6bd9b

    • Size

      280KB

    • MD5

      b0b4d37c71bd245b7a0aa19bfdef4f99

    • SHA1

      9e2361354d08096398e6abf9065b43f3c898c2a7

    • SHA256

      fabebec256582dbc073b7b109c6537e4fc1cd70a915542f29310448703b6bd9b

    • SHA512

      8416f308cd91be5667ec40c7118edd775e4860906d06c3ff6f57d187894f9057c35179f5a813b996ff2b36501aae51b917ac580b70d5c3cd0858edf0910d96e9

    • SSDEEP

      6144:Pf5T+PtH6ci/GOORjMmRUoooooooooooooooooooooooooy/G3:PFw1i//OVLCooooooooooooooooooooa

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks