Overview

overview

10

Static

static

3

69445e9a75...0N.exe

windows7-x64

10

69445e9a75...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    69445e9a758093f0c259d3c447337720N.exe

  • Size

    512KB

  • Sample

    240822-jemkvaycrp

  • MD5

    69445e9a758093f0c259d3c447337720

  • SHA1

    8c68e8888cff538e734633f4d2a4391b03ebe3b6

  • SHA256

    b1ef017a51d00852a0d5be98d3aea9f1f84c8aad396d61de77358901faf0660e

  • SHA512

    d8b399de5baa9290e55c2fc0eb18fd3587944bd9f62901c50156894966e48424705223c18b0339ee5545d387ca78f5b8f35db46c05fff401ec241d175057b108

  • SSDEEP

    6144:pijZwDHgKBgrTErdQt383PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5fjlt01v:pij2dgr1r/Ng1/Nblt01PBExK

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      69445e9a758093f0c259d3c447337720N.exe

    • Size

      512KB

    • MD5

      69445e9a758093f0c259d3c447337720

    • SHA1

      8c68e8888cff538e734633f4d2a4391b03ebe3b6

    • SHA256

      b1ef017a51d00852a0d5be98d3aea9f1f84c8aad396d61de77358901faf0660e

    • SHA512

      d8b399de5baa9290e55c2fc0eb18fd3587944bd9f62901c50156894966e48424705223c18b0339ee5545d387ca78f5b8f35db46c05fff401ec241d175057b108

    • SSDEEP

      6144:pijZwDHgKBgrTErdQt383PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5fjlt01v:pij2dgr1r/Ng1/Nblt01PBExK

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks