Overview

overview

10

Static

static

3

521c517c37...0N.exe

windows7-x64

10

521c517c37...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    521c517c37ddf3a7639a542b0cc09640N.exe

  • Size

    2.2MB

  • Sample

    240817-kja82szcql

  • MD5

    521c517c37ddf3a7639a542b0cc09640

  • SHA1

    0ea17647ca4f297462b6e31fee446bd93a37be62

  • SHA256

    770301632e541fc50ce57b0e23766528a0a84a0438a81de53f2b308373a948da

  • SHA512

    1352ffd420db1017b3ffa2c318c784e75cda54cb46dfff4b65a8fc3bb14ee8a9ebeec3d071bc1f62e0a60d2a7739ba5a733c8be43998e018ee994f97263ab08a

  • SSDEEP

    6144:RBOVVEv1JJUEie6UK+42GTQMJSZO5JVuvw0HBHOnehlnHa:RYVVEJkY660JVaw0HBHOehl6

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      521c517c37ddf3a7639a542b0cc09640N.exe

    • Size

      2.2MB

    • MD5

      521c517c37ddf3a7639a542b0cc09640

    • SHA1

      0ea17647ca4f297462b6e31fee446bd93a37be62

    • SHA256

      770301632e541fc50ce57b0e23766528a0a84a0438a81de53f2b308373a948da

    • SHA512

      1352ffd420db1017b3ffa2c318c784e75cda54cb46dfff4b65a8fc3bb14ee8a9ebeec3d071bc1f62e0a60d2a7739ba5a733c8be43998e018ee994f97263ab08a

    • SSDEEP

      6144:RBOVVEv1JJUEie6UK+42GTQMJSZO5JVuvw0HBHOnehlnHa:RYVVEJkY660JVaw0HBHOehl6

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks