Overview

overview

10

Static

static

3

937b51ffd5...0N.exe

windows7-x64

10

937b51ffd5...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    937b51ffd552cbe14f1aabeb4f500080N.exe

  • Size

    69KB

  • Sample

    240723-kv3sfaybpk

  • MD5

    937b51ffd552cbe14f1aabeb4f500080

  • SHA1

    9f2b1d7fa479b3a5374f5e9575762ca1167ab19d

  • SHA256

    944cf4b606e81b3ff4d0a48c90002e4c7708091bad5bef4e065e25a64c83d8a2

  • SHA512

    42672debdd6d6a4f32df5df81809eaf89067bee73b03b5a58741fa66149025a2380892b7addd375aaf036d2e60a188d0651f9bc19e6625347efd71627470d7d4

  • SSDEEP

    1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8NU8nv:Olg35GTslA5t3/w8NU8nv

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      937b51ffd552cbe14f1aabeb4f500080N.exe

    • Size

      69KB

    • MD5

      937b51ffd552cbe14f1aabeb4f500080

    • SHA1

      9f2b1d7fa479b3a5374f5e9575762ca1167ab19d

    • SHA256

      944cf4b606e81b3ff4d0a48c90002e4c7708091bad5bef4e065e25a64c83d8a2

    • SHA512

      42672debdd6d6a4f32df5df81809eaf89067bee73b03b5a58741fa66149025a2380892b7addd375aaf036d2e60a188d0651f9bc19e6625347efd71627470d7d4

    • SSDEEP

      1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8NU8nv:Olg35GTslA5t3/w8NU8nv

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Event Triggered Execution: Image File Execution Options Injection

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks