Overview

overview

10

Static

static

3

d654a80a3c...0N.exe

windows7-x64

10

d654a80a3c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d654a80a3c20892222c5041d486768b0N.exe

  • Size

    1000KB

  • Sample

    240817-nfph2ssfjg

  • MD5

    d654a80a3c20892222c5041d486768b0

  • SHA1

    3f2275d915ed1c8a5f8115bf2b0af85ca0d1cb25

  • SHA256

    ea1bd4c8f653748011b52ad0b784655068aae2bdedffebd9f8d503a2fcaa2772

  • SHA512

    873b0ad8ab7975a327e96cad331a7aa535f5441fa8681963df83907df3a34f845fc0a850855fbe0b6b5d96b2a079967fd5dedd28d60e7ae1330541908c6da23b

  • SSDEEP

    12288:t+qFoWtHBFLPj3TmLnWrOxNuxC97hFq9o7:tMWtHBFLPj368MoC9Dq9o7

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      d654a80a3c20892222c5041d486768b0N.exe

    • Size

      1000KB

    • MD5

      d654a80a3c20892222c5041d486768b0

    • SHA1

      3f2275d915ed1c8a5f8115bf2b0af85ca0d1cb25

    • SHA256

      ea1bd4c8f653748011b52ad0b784655068aae2bdedffebd9f8d503a2fcaa2772

    • SHA512

      873b0ad8ab7975a327e96cad331a7aa535f5441fa8681963df83907df3a34f845fc0a850855fbe0b6b5d96b2a079967fd5dedd28d60e7ae1330541908c6da23b

    • SSDEEP

      12288:t+qFoWtHBFLPj3TmLnWrOxNuxC97hFq9o7:tMWtHBFLPj368MoC9Dq9o7

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks