Overview

overview

10

Static

static

3

a09f8858c4...6e.exe

windows7-x64

10

a09f8858c4...6e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a09f8858c48e260faa9ead52b6a0563806e1af4eca8ffc50e3976e1a0055b26e

  • Size

    124KB

  • Sample

    240727-bzerqs1erf

  • MD5

    0a3a78ee59bbcc94d0d0f812ab097f52

  • SHA1

    b4cebb0e24de12be6784d9733fe9da5697b5c952

  • SHA256

    a09f8858c48e260faa9ead52b6a0563806e1af4eca8ffc50e3976e1a0055b26e

  • SHA512

    6bf9990036c94e22f829ec57216103f9ee0d78ec456b2fcaf33c9a42d1feea3ef47784c6ed717e18015b1b9b9dddc650593b243fcdb23644331121f216750411

  • SSDEEP

    3072:AbA8ZSqUBGTbM4oapmHysdBj6+JB8M6m9jqLsFmsr:p8wymlBj6MB8Mhjwszr

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      a09f8858c48e260faa9ead52b6a0563806e1af4eca8ffc50e3976e1a0055b26e

    • Size

      124KB

    • MD5

      0a3a78ee59bbcc94d0d0f812ab097f52

    • SHA1

      b4cebb0e24de12be6784d9733fe9da5697b5c952

    • SHA256

      a09f8858c48e260faa9ead52b6a0563806e1af4eca8ffc50e3976e1a0055b26e

    • SHA512

      6bf9990036c94e22f829ec57216103f9ee0d78ec456b2fcaf33c9a42d1feea3ef47784c6ed717e18015b1b9b9dddc650593b243fcdb23644331121f216750411

    • SSDEEP

      3072:AbA8ZSqUBGTbM4oapmHysdBj6+JB8M6m9jqLsFmsr:p8wymlBj6MB8Mhjwszr

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks