Overview

overview

10

Static

static

3

1d13106aec...cc.exe

windows7-x64

10

1d13106aec...cc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d13106aec6971bb83c4e19d0c5b0b4a22da6685ec67740df04cafbb502026cc

  • Size

    206KB

  • Sample

    240828-ybs1satgrn

  • MD5

    83e7e469313593142c708f77d002ce27

  • SHA1

    9c002fe7b23a3de6060ac0a79bc1fa30e0217450

  • SHA256

    1d13106aec6971bb83c4e19d0c5b0b4a22da6685ec67740df04cafbb502026cc

  • SHA512

    84f12257e6237a0831f9fa6bc87d7521338d58f3a79d861c7d11a0a032c0466f87ae8f9c843b6724d9e2105ed087a7f296f4aebe6657b21b5d1a5380d3de5d74

  • SSDEEP

    3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6un1:zvEN2U+T6i5LirrllHy4HUcMQY6O

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      1d13106aec6971bb83c4e19d0c5b0b4a22da6685ec67740df04cafbb502026cc

    • Size

      206KB

    • MD5

      83e7e469313593142c708f77d002ce27

    • SHA1

      9c002fe7b23a3de6060ac0a79bc1fa30e0217450

    • SHA256

      1d13106aec6971bb83c4e19d0c5b0b4a22da6685ec67740df04cafbb502026cc

    • SHA512

      84f12257e6237a0831f9fa6bc87d7521338d58f3a79d861c7d11a0a032c0466f87ae8f9c843b6724d9e2105ed087a7f296f4aebe6657b21b5d1a5380d3de5d74

    • SSDEEP

      3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6un1:zvEN2U+T6i5LirrllHy4HUcMQY6O

    Score
    10/10
    discoveryevasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks