Overview

overview

10

Static

static

3

28ca41e5b6...67.exe

windows7-x64

10

28ca41e5b6...67.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    28ca41e5b66bfbfe3069e675ecfb27600f9c6820a606ec92ce3d68d76aca4167

  • Size

    80KB

  • Sample

    240722-ygr1nsvcmh

  • MD5

    4ab6f9a3bc8b28dc276b9e7414952f6a

  • SHA1

    03e70594dc8f0da0caee49eee008cd5ceba88375

  • SHA256

    28ca41e5b66bfbfe3069e675ecfb27600f9c6820a606ec92ce3d68d76aca4167

  • SHA512

    220970fdcbd4b53559e19403d29cba73624df007ca9ad489f55799b92a1100d3c99cd65a500d31706b09d483f0313d0991425e285e281d3803fe489320b3b15d

  • SSDEEP

    1536:zI71fwANNoyiFAonR/Aoy2LGS5DUHRbPa9b6i+sIk:8lNSmo/GS5DSCopsIk

Score
10/10
persistence

Malware Config

Targets

    • Target

      28ca41e5b66bfbfe3069e675ecfb27600f9c6820a606ec92ce3d68d76aca4167

    • Size

      80KB

    • MD5

      4ab6f9a3bc8b28dc276b9e7414952f6a

    • SHA1

      03e70594dc8f0da0caee49eee008cd5ceba88375

    • SHA256

      28ca41e5b66bfbfe3069e675ecfb27600f9c6820a606ec92ce3d68d76aca4167

    • SHA512

      220970fdcbd4b53559e19403d29cba73624df007ca9ad489f55799b92a1100d3c99cd65a500d31706b09d483f0313d0991425e285e281d3803fe489320b3b15d

    • SSDEEP

      1536:zI71fwANNoyiFAonR/Aoy2LGS5DUHRbPa9b6i+sIk:8lNSmo/GS5DSCopsIk

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks