Overview

overview

10

Static

static

3

0cf40e1b60...13.exe

windows7-x64

10

0cf40e1b60...13.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0cf40e1b60f8650f5d73d5255c7c9d42b6cb2766c025b306ed0c86dace9fff13

  • Size

    96KB

  • Sample

    240817-xhlpls1cpg

  • MD5

    67462f8f9927e553348b5f1c8cbc20da

  • SHA1

    e671a2c5460836e9102fd3f83244947dfd8e150e

  • SHA256

    0cf40e1b60f8650f5d73d5255c7c9d42b6cb2766c025b306ed0c86dace9fff13

  • SHA512

    aafe2d3bd580851eb6de314443b43311c8c5c7957a5baa81e48c78205a57021a88b3650c963b97bb22bd6e0b06a95d68f99d095f050a9206df12b111632714c2

  • SSDEEP

    1536:LxPt+VHkxxj2hgUAzGvnxNM1+/kw0yw8EsB9xhNsRQt6RkRLJzeLD9N0iQGRNQRl:Lr+VEfjigUAzGvnxNMg35luewSJdEN0v

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      0cf40e1b60f8650f5d73d5255c7c9d42b6cb2766c025b306ed0c86dace9fff13

    • Size

      96KB

    • MD5

      67462f8f9927e553348b5f1c8cbc20da

    • SHA1

      e671a2c5460836e9102fd3f83244947dfd8e150e

    • SHA256

      0cf40e1b60f8650f5d73d5255c7c9d42b6cb2766c025b306ed0c86dace9fff13

    • SHA512

      aafe2d3bd580851eb6de314443b43311c8c5c7957a5baa81e48c78205a57021a88b3650c963b97bb22bd6e0b06a95d68f99d095f050a9206df12b111632714c2

    • SSDEEP

      1536:LxPt+VHkxxj2hgUAzGvnxNM1+/kw0yw8EsB9xhNsRQt6RkRLJzeLD9N0iQGRNQRl:Lr+VEfjigUAzGvnxNMg35luewSJdEN0v

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks