Overview

overview

10

Static

static

3

8733f208bd...08.exe

windows7-x64

10

8733f208bd...08.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8733f208bd3239d77e0e62cc0201f93f725db59d8709e6023be039954c9e6708

  • Size

    206KB

  • Sample

    240829-ahmkkswapm

  • MD5

    48c1363a30273c907b955377746016b5

  • SHA1

    234d7872a43191392f1b3ee38f50a56a24b418a6

  • SHA256

    8733f208bd3239d77e0e62cc0201f93f725db59d8709e6023be039954c9e6708

  • SHA512

    b122e5a25943395d9332e706cc2f355297dfc4c7bbd0a1d7e9bcbf7d42629782502a4f4c12d94787864598d0d81b1a4a1d89e77a4543c94b2262e4ed20a09889

  • SSDEEP

    3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unk:zvEN2U+T6i5LirrllHy4HUcMQY6T

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      8733f208bd3239d77e0e62cc0201f93f725db59d8709e6023be039954c9e6708

    • Size

      206KB

    • MD5

      48c1363a30273c907b955377746016b5

    • SHA1

      234d7872a43191392f1b3ee38f50a56a24b418a6

    • SHA256

      8733f208bd3239d77e0e62cc0201f93f725db59d8709e6023be039954c9e6708

    • SHA512

      b122e5a25943395d9332e706cc2f355297dfc4c7bbd0a1d7e9bcbf7d42629782502a4f4c12d94787864598d0d81b1a4a1d89e77a4543c94b2262e4ed20a09889

    • SSDEEP

      3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unk:zvEN2U+T6i5LirrllHy4HUcMQY6T

    Score
    10/10
    discoveryevasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks