Overview

overview

6

Static

static

3

2e8ae6211f...0N.exe

windows7-x64

6

2e8ae6211f...0N.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e8ae6211f8e9172064dbe22feac6d40N.exe

  • Size

    184KB

  • Sample

    240819-zhpglsyfjq

  • MD5

    2e8ae6211f8e9172064dbe22feac6d40

  • SHA1

    8ce9452102cc452f725b58eb41919940c8c887da

  • SHA256

    37df9e5878dd0a6e708737674bdcc0b85ae99238e6bce5cd798629f3dda99ae6

  • SHA512

    caf8962043833e0d7920a31d2e4793a1fc29e3199d28b753b270531aefdffa8adca91bc3f4ef81064dd5ea351d3799abf2528800b8764480a7f1c8e410c199a2

  • SSDEEP

    3072:qIcGkChX8GwHw7sgEbr3n8KllyYzx4GUAWHN5wOrCVxkAP4YxH2X:qIc+8guT8YzKtprCVKA7WX

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      2e8ae6211f8e9172064dbe22feac6d40N.exe

    • Size

      184KB

    • MD5

      2e8ae6211f8e9172064dbe22feac6d40

    • SHA1

      8ce9452102cc452f725b58eb41919940c8c887da

    • SHA256

      37df9e5878dd0a6e708737674bdcc0b85ae99238e6bce5cd798629f3dda99ae6

    • SHA512

      caf8962043833e0d7920a31d2e4793a1fc29e3199d28b753b270531aefdffa8adca91bc3f4ef81064dd5ea351d3799abf2528800b8764480a7f1c8e410c199a2

    • SSDEEP

      3072:qIcGkChX8GwHw7sgEbr3n8KllyYzx4GUAWHN5wOrCVxkAP4YxH2X:qIc+8guT8YzKtprCVKA7WX

    Score
    6/10
    persistencediscovery

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks