Overview

overview

10

Static

static

3

a8900a7020...0N.exe

windows7-x64

10

a8900a7020...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a8900a7020ec4d09164708475e85f250N.exe

  • Size

    1.1MB

  • Sample

    240805-s37qcsvble

  • MD5

    a8900a7020ec4d09164708475e85f250

  • SHA1

    58f7a24a3ef695b8f7f45b7bc9965a8e4ba85610

  • SHA256

    1c2f076dbd037dc3d1df0b1dbff1963cf2f8b2f4a7704daa990a9c434fec45bb

  • SHA512

    d6a1a535fbceb494404ec3e15e437321f304bb2a157191707b3dd50954f0ca54ff702a4276a11ac30a719d4c31e32bfebae1717fc12805d4f9ad52ce5ab6da73

  • SSDEEP

    24576:PFOaw7blrkDLjSUfnTU64fQn61v5dMak3js/gD1DsO:tc75QPjFfNpk5q3jQgDZ

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      a8900a7020ec4d09164708475e85f250N.exe

    • Size

      1.1MB

    • MD5

      a8900a7020ec4d09164708475e85f250

    • SHA1

      58f7a24a3ef695b8f7f45b7bc9965a8e4ba85610

    • SHA256

      1c2f076dbd037dc3d1df0b1dbff1963cf2f8b2f4a7704daa990a9c434fec45bb

    • SHA512

      d6a1a535fbceb494404ec3e15e437321f304bb2a157191707b3dd50954f0ca54ff702a4276a11ac30a719d4c31e32bfebae1717fc12805d4f9ad52ce5ab6da73

    • SSDEEP

      24576:PFOaw7blrkDLjSUfnTU64fQn61v5dMak3js/gD1DsO:tc75QPjFfNpk5q3jQgDZ

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks