Overview

overview

10

Static

static

3

b9f5f23c4c...24.exe

windows7-x64

10

b9f5f23c4c...24.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b9f5f23c4c4ba0dac3a6bd0048ea65199b16ba98b68d6d875a2488f9929af324

  • Size

    128KB

  • Sample

    240709-etqhtswamm

  • MD5

    a9fef8882e4d382cd4148239fe9642c0

  • SHA1

    53b13e9ed51dd82305a3b97e7bb8e5bb1ac762ef

  • SHA256

    b9f5f23c4c4ba0dac3a6bd0048ea65199b16ba98b68d6d875a2488f9929af324

  • SHA512

    a9f721765016e56686c8bdb693ba4f8890e4f55699b345163aa43916360d113080ec44092ad8898346da436ef5f10e23fb3f1d928e06e940e28bc03d598611d8

  • SSDEEP

    3072:lDUofVM6Cu4sVqZ2fQkbn1vVAva63HePH/RAPJis2Ht3IjXq:lg67z4sg4fQkjxqvak+PH/RARMHG2

Score
10/10
persistence

Malware Config

Targets

    • Target

      b9f5f23c4c4ba0dac3a6bd0048ea65199b16ba98b68d6d875a2488f9929af324

    • Size

      128KB

    • MD5

      a9fef8882e4d382cd4148239fe9642c0

    • SHA1

      53b13e9ed51dd82305a3b97e7bb8e5bb1ac762ef

    • SHA256

      b9f5f23c4c4ba0dac3a6bd0048ea65199b16ba98b68d6d875a2488f9929af324

    • SHA512

      a9f721765016e56686c8bdb693ba4f8890e4f55699b345163aa43916360d113080ec44092ad8898346da436ef5f10e23fb3f1d928e06e940e28bc03d598611d8

    • SSDEEP

      3072:lDUofVM6Cu4sVqZ2fQkbn1vVAva63HePH/RAPJis2Ht3IjXq:lg67z4sg4fQkjxqvak+PH/RARMHG2

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks