Overview

overview

10

Static

static

3

d859a20992...0N.exe

windows7-x64

10

d859a20992...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d859a20992bce9a96ef743c4ac542080N.exe

  • Size

    208KB

  • Sample

    240823-yq6kestbmg

  • MD5

    d859a20992bce9a96ef743c4ac542080

  • SHA1

    d8fd3a6fb36ffa4a56c7ccbcb903ee10396ca4d5

  • SHA256

    e54a166b836d52482594d965a1a888ec712fbfd97e265315d895820ad3df8253

  • SHA512

    00f153e26906f829648263c9def0bb3622d3c1fca7b826a726f4b38d79a3febc71cb66b76050fbeaf1f00a54da1272d91992ededc1f07639aa3520a7320a0653

  • SSDEEP

    3072:eQl16/rlzN8AuokMOKCWa2c6X16+oXO56hKpi9poF5aY6+oocpGHHQnNJuIb:ei8/xzTeMzCqzA+Eu6QnFw5+0pU8b

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      d859a20992bce9a96ef743c4ac542080N.exe

    • Size

      208KB

    • MD5

      d859a20992bce9a96ef743c4ac542080

    • SHA1

      d8fd3a6fb36ffa4a56c7ccbcb903ee10396ca4d5

    • SHA256

      e54a166b836d52482594d965a1a888ec712fbfd97e265315d895820ad3df8253

    • SHA512

      00f153e26906f829648263c9def0bb3622d3c1fca7b826a726f4b38d79a3febc71cb66b76050fbeaf1f00a54da1272d91992ededc1f07639aa3520a7320a0653

    • SSDEEP

      3072:eQl16/rlzN8AuokMOKCWa2c6X16+oXO56hKpi9poF5aY6+oocpGHHQnNJuIb:ei8/xzTeMzCqzA+Eu6QnFw5+0pU8b

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks