Overview

overview

10

Static

static

3

29b90898b8...f1.exe

windows7-x64

10

29b90898b8...f1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29b90898b8fa2c993d0afd91d4cc9ec21d9a66a2e4d01b5db990c77498b8cff1

  • Size

    227KB

  • Sample

    240709-yym32stbmk

  • MD5

    3c84728862bcc4e779d802a2a586baea

  • SHA1

    79165d338da5eb3beaa986e36e6f69fdffedfdbf

  • SHA256

    29b90898b8fa2c993d0afd91d4cc9ec21d9a66a2e4d01b5db990c77498b8cff1

  • SHA512

    4024d068f41246d7437aa5d1c81d52c492ec8b4e61c21764a628cb54f4ddeaac99b1b2ba1ce7f178ad27bf37f8f7ea0231c926d2e8c0d963de3079d289f57c53

  • SSDEEP

    3072:PVQfrGkQGqOaMvTtYmK5eyepwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jFHu:PGtVmMLllgm7U5j2QE2+g24Id2jFHu

Score
10/10
persistence

Malware Config

Targets

    • Target

      29b90898b8fa2c993d0afd91d4cc9ec21d9a66a2e4d01b5db990c77498b8cff1

    • Size

      227KB

    • MD5

      3c84728862bcc4e779d802a2a586baea

    • SHA1

      79165d338da5eb3beaa986e36e6f69fdffedfdbf

    • SHA256

      29b90898b8fa2c993d0afd91d4cc9ec21d9a66a2e4d01b5db990c77498b8cff1

    • SHA512

      4024d068f41246d7437aa5d1c81d52c492ec8b4e61c21764a628cb54f4ddeaac99b1b2ba1ce7f178ad27bf37f8f7ea0231c926d2e8c0d963de3079d289f57c53

    • SSDEEP

      3072:PVQfrGkQGqOaMvTtYmK5eyepwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jFHu:PGtVmMLllgm7U5j2QE2+g24Id2jFHu

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks