Overview

overview

10

Static

static

3

0c73655e4a...0N.exe

windows7-x64

10

0c73655e4a...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c73655e4aef64d51b11ed14517ba370N.exe

  • Size

    1.2MB

  • Sample

    240820-l64pjswclg

  • MD5

    0c73655e4aef64d51b11ed14517ba370

  • SHA1

    00384307cd635c6391e484c6880256cfa3c55d98

  • SHA256

    e9c2e953a932017f923bb952e6db1f01c1a5e12356529330b77978b8ec6046c6

  • SHA512

    d8b7dcbe18c8efa08c41eeb3a4d49c391f9c73ed3356969077f845007d59e4b5b64c35b41c4280ef2220fcedfad663749930c100f6a68317fb05702532067c60

  • SSDEEP

    24576:jj+cktriK2PVboYTicnT1SBb//wDKULTrhSFkOTu+FM4:uSPVboYTVABjRGtSFruN4

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      0c73655e4aef64d51b11ed14517ba370N.exe

    • Size

      1.2MB

    • MD5

      0c73655e4aef64d51b11ed14517ba370

    • SHA1

      00384307cd635c6391e484c6880256cfa3c55d98

    • SHA256

      e9c2e953a932017f923bb952e6db1f01c1a5e12356529330b77978b8ec6046c6

    • SHA512

      d8b7dcbe18c8efa08c41eeb3a4d49c391f9c73ed3356969077f845007d59e4b5b64c35b41c4280ef2220fcedfad663749930c100f6a68317fb05702532067c60

    • SSDEEP

      24576:jj+cktriK2PVboYTicnT1SBb//wDKULTrhSFkOTu+FM4:uSPVboYTVABjRGtSFruN4

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks