Overview

overview

10

Static

static

3

dd255cb29a...b0.exe

windows7-x64

10

dd255cb29a...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd255cb29a5af86b1fc9cbaceff6f402f1b0ed662e52a75b1cc766f41834dbb0

  • Size

    896KB

  • Sample

    240825-gzcv2a1amq

  • MD5

    1f261d86aa08939a67544de490ea3397

  • SHA1

    8125dcad5e1f076e123cef412a497e4bbf69f369

  • SHA256

    dd255cb29a5af86b1fc9cbaceff6f402f1b0ed662e52a75b1cc766f41834dbb0

  • SHA512

    bb5c235fdb4adc7207a7b8ee9a86dba3f243bf1c7c0fa7626c5e415d908a30d23cf780e3b602e78431ec874eccb60b8ba8d8896eb288a0e279b918c345cb9e98

  • SSDEEP

    12288:5OC8/rY/+FMusMH0QiRLsR4P377a20R01F50+5:QPILX3a20R0v50+5

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      dd255cb29a5af86b1fc9cbaceff6f402f1b0ed662e52a75b1cc766f41834dbb0

    • Size

      896KB

    • MD5

      1f261d86aa08939a67544de490ea3397

    • SHA1

      8125dcad5e1f076e123cef412a497e4bbf69f369

    • SHA256

      dd255cb29a5af86b1fc9cbaceff6f402f1b0ed662e52a75b1cc766f41834dbb0

    • SHA512

      bb5c235fdb4adc7207a7b8ee9a86dba3f243bf1c7c0fa7626c5e415d908a30d23cf780e3b602e78431ec874eccb60b8ba8d8896eb288a0e279b918c345cb9e98

    • SSDEEP

      12288:5OC8/rY/+FMusMH0QiRLsR4P377a20R01F50+5:QPILX3a20R0v50+5

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks