Overview

overview

10

Static

static

3

d6cd939482...0N.exe

windows7-x64

10

d6cd939482...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6cd939482b4ade431c618bb116a8580N.exe

  • Size

    96KB

  • Sample

    240721-rvybaawalp

  • MD5

    d6cd939482b4ade431c618bb116a8580

  • SHA1

    31b86412b353f13adee77ed31a832ebdf52defcf

  • SHA256

    6c101abcee5c46ca29d30cc9bbc98937e0787536befcc9bac2d6bdabe71a18df

  • SHA512

    94862c009c5401f9d8a330315bac6b8c1414788b5b2d171e784ca0968de66bd469688b8c687040b6fe2118420753bd18110fe383b5063434d52442785a59e669

  • SSDEEP

    1536:0dlhgYkvlcms/kbJBVR/Hml2Le7RZObZUUWaegPYA:/+H/kbJBVRvmWeClUUWae

Score
10/10
persistence

Malware Config

Targets

    • Target

      d6cd939482b4ade431c618bb116a8580N.exe

    • Size

      96KB

    • MD5

      d6cd939482b4ade431c618bb116a8580

    • SHA1

      31b86412b353f13adee77ed31a832ebdf52defcf

    • SHA256

      6c101abcee5c46ca29d30cc9bbc98937e0787536befcc9bac2d6bdabe71a18df

    • SHA512

      94862c009c5401f9d8a330315bac6b8c1414788b5b2d171e784ca0968de66bd469688b8c687040b6fe2118420753bd18110fe383b5063434d52442785a59e669

    • SSDEEP

      1536:0dlhgYkvlcms/kbJBVR/Hml2Le7RZObZUUWaegPYA:/+H/kbJBVRvmWeClUUWae

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks