Overview

overview

10

Static

static

3

ff4a979965...0N.exe

windows7-x64

10

ff4a979965...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ff4a9799655b8ae6d812d6a6b8eb1350N.exe

  • Size

    229KB

  • Sample

    240823-qbpdlavgpa

  • MD5

    ff4a9799655b8ae6d812d6a6b8eb1350

  • SHA1

    6cc4c3e86b2aeec3209517d23e660f6ef1da786a

  • SHA256

    5173d7d86d14495fa2e26503f9ea2015a966f2c6d579b98d3f94b86351dcbeea

  • SHA512

    93f0a0a34bfce6d6fa21773279c8b1993d2152164cd0cc587d94785f7188361f97b5106523adcd07df027a21128bd6cd2a4720b5064a73953b48fd8982da4274

  • SSDEEP

    6144:L7rYKCaXcjTeqZ271+HZ/pvkym/89bYEwPhCKvav:X0KCaXcjax7AIfFfvav

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ff4a9799655b8ae6d812d6a6b8eb1350N.exe

    • Size

      229KB

    • MD5

      ff4a9799655b8ae6d812d6a6b8eb1350

    • SHA1

      6cc4c3e86b2aeec3209517d23e660f6ef1da786a

    • SHA256

      5173d7d86d14495fa2e26503f9ea2015a966f2c6d579b98d3f94b86351dcbeea

    • SHA512

      93f0a0a34bfce6d6fa21773279c8b1993d2152164cd0cc587d94785f7188361f97b5106523adcd07df027a21128bd6cd2a4720b5064a73953b48fd8982da4274

    • SSDEEP

      6144:L7rYKCaXcjTeqZ271+HZ/pvkym/89bYEwPhCKvav:X0KCaXcjax7AIfFfvav

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks