Overview

overview

10

Static

static

3

f478a16a3b...0N.exe

windows7-x64

10

f478a16a3b...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f478a16a3be7ec4ae84861a41aea6ec0N.exe

  • Size

    250KB

  • Sample

    240825-vlmpzawfpr

  • MD5

    f478a16a3be7ec4ae84861a41aea6ec0

  • SHA1

    6dc03c710936da70486c53f3bff1a8ef9a5587cc

  • SHA256

    1173cb9abaae303289272d5711cf7b1319e888d05814be57c4eac1deb23adc4c

  • SHA512

    773482ff681cf89c565138dba87c9b69332710b58c66b1ba2ead7fe386b0a562e1e99e2f86dc39b0f77405d5596bef8596e85a646fb26b7b137d87d46b22afe1

  • SSDEEP

    6144:/6SDh495B9HmLvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:+f

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      f478a16a3be7ec4ae84861a41aea6ec0N.exe

    • Size

      250KB

    • MD5

      f478a16a3be7ec4ae84861a41aea6ec0

    • SHA1

      6dc03c710936da70486c53f3bff1a8ef9a5587cc

    • SHA256

      1173cb9abaae303289272d5711cf7b1319e888d05814be57c4eac1deb23adc4c

    • SHA512

      773482ff681cf89c565138dba87c9b69332710b58c66b1ba2ead7fe386b0a562e1e99e2f86dc39b0f77405d5596bef8596e85a646fb26b7b137d87d46b22afe1

    • SSDEEP

      6144:/6SDh495B9HmLvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:+f

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks