Overview

overview

10

Static

static

3

c444950a50...17.exe

windows7-x64

10

c444950a50...17.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c444950a5064148555508feecbb85ecbe44f18076d5a3f4b0e1939e0cfa44d17

  • Size

    1.1MB

  • Sample

    240826-c94z2sscnp

  • MD5

    a06b56f5f291bf68224bc755b8d4df5f

  • SHA1

    11791fd11197fb7696233f01756c6a3480073450

  • SHA256

    c444950a5064148555508feecbb85ecbe44f18076d5a3f4b0e1939e0cfa44d17

  • SHA512

    8918e5e8d8f210b1df98337e8b3234673574b1e43a506ca116ab0fb683659e7b83960370169c747f5d6a7125f4175f11bcd85b916a8b4787520d358ef27d91fb

  • SSDEEP

    12288:pK+IVQyrQg5Z/+zrWAIAqWim/+zrWAI5KFukEyDucEQX:0+IlrQg5ZmvFimm0HkEyDucEQX

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      c444950a5064148555508feecbb85ecbe44f18076d5a3f4b0e1939e0cfa44d17

    • Size

      1.1MB

    • MD5

      a06b56f5f291bf68224bc755b8d4df5f

    • SHA1

      11791fd11197fb7696233f01756c6a3480073450

    • SHA256

      c444950a5064148555508feecbb85ecbe44f18076d5a3f4b0e1939e0cfa44d17

    • SHA512

      8918e5e8d8f210b1df98337e8b3234673574b1e43a506ca116ab0fb683659e7b83960370169c747f5d6a7125f4175f11bcd85b916a8b4787520d358ef27d91fb

    • SSDEEP

      12288:pK+IVQyrQg5Z/+zrWAIAqWim/+zrWAI5KFukEyDucEQX:0+IlrQg5ZmvFimm0HkEyDucEQX

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks