Overview

overview

10

Static

static

3

f1bda37d9b...0N.exe

windows7-x64

10

f1bda37d9b...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f1bda37d9bc45561511636590783f640N.exe

  • Size

    1.7MB

  • Sample

    240825-t79aestenc

  • MD5

    f1bda37d9bc45561511636590783f640

  • SHA1

    a186c12b21cee9232435f9796e807870dbfb3a33

  • SHA256

    bd4286a22f1bc2bf599287206fe1911bd507a17fd9f3a8a5c94eb27bb6baa45d

  • SHA512

    aea19d1d2da0292c3cfd5f02d108d580b5e779ad120b6872af136f1e24055b693b575a97156e5cc364eed92e3f4830928ca36c0db384b1f3c4a917ae7d615d57

  • SSDEEP

    12288:jr/Ng1/Nblt01PBExKN4P6IfKTLR+6CwUkEoILClt01PBExKN4P6IfKTLR+6CwUl:Ylks/6HnEpelks/6HnEpnAc

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      f1bda37d9bc45561511636590783f640N.exe

    • Size

      1.7MB

    • MD5

      f1bda37d9bc45561511636590783f640

    • SHA1

      a186c12b21cee9232435f9796e807870dbfb3a33

    • SHA256

      bd4286a22f1bc2bf599287206fe1911bd507a17fd9f3a8a5c94eb27bb6baa45d

    • SHA512

      aea19d1d2da0292c3cfd5f02d108d580b5e779ad120b6872af136f1e24055b693b575a97156e5cc364eed92e3f4830928ca36c0db384b1f3c4a917ae7d615d57

    • SSDEEP

      12288:jr/Ng1/Nblt01PBExKN4P6IfKTLR+6CwUkEoILClt01PBExKN4P6IfKTLR+6CwUl:Ylks/6HnEpelks/6HnEpnAc

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks