Overview

overview

10

Static

static

1

08be13eb07...3f.exe

windows7-x64

10

08be13eb07...3f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08be13eb070b129b734d35fbd784331c66dc0e1cc5fc38803a64f3d25792b33f

  • Size

    1.4MB

  • Sample

    240705-w4g3wavgrf

  • MD5

    1de31b76ccdf642b341817bd9f0dc572

  • SHA1

    7e4e646035aa3524ae793b51d2b6dd8403d54fa1

  • SHA256

    08be13eb070b129b734d35fbd784331c66dc0e1cc5fc38803a64f3d25792b33f

  • SHA512

    082632b503d9ad38b4169b83660abe03594ef94280a208c7e26fa3262611115c65ea106da840e5a96c62cf4e59938eeedc5d79726301f82dff32d3ca489d4e9a

  • SSDEEP

    24576:E30hJ529+RipvL1SXk1QE1RGOTnIEQc4au9NgxnHNnof:EEM9+ApwXk1QE1RzsEQPaxHNI

Score
10/10
evasion

Malware Config

Targets

    • Target

      08be13eb070b129b734d35fbd784331c66dc0e1cc5fc38803a64f3d25792b33f

    • Size

      1.4MB

    • MD5

      1de31b76ccdf642b341817bd9f0dc572

    • SHA1

      7e4e646035aa3524ae793b51d2b6dd8403d54fa1

    • SHA256

      08be13eb070b129b734d35fbd784331c66dc0e1cc5fc38803a64f3d25792b33f

    • SHA512

      082632b503d9ad38b4169b83660abe03594ef94280a208c7e26fa3262611115c65ea106da840e5a96c62cf4e59938eeedc5d79726301f82dff32d3ca489d4e9a

    • SSDEEP

      24576:E30hJ529+RipvL1SXk1QE1RGOTnIEQc4au9NgxnHNnof:EEM9+ApwXk1QE1RzsEQPaxHNI

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks