Overview

overview

10

Static

static

3

5a7175b2bc...0N.exe

windows7-x64

10

5a7175b2bc...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a7175b2bcb7e85c8a002e1982369770N.exe

  • Size

    280KB

  • Sample

    240829-rjnygaxfqq

  • MD5

    5a7175b2bcb7e85c8a002e1982369770

  • SHA1

    f487d814fde0d8ddf6856bd5ecd9ceef9bfd5527

  • SHA256

    5ddc1ca5544848ea3335428faf77e2c0cc567441a3b503a2d85e3d89e45f46e7

  • SHA512

    440be6f29d003c6704568a6eb3c436e7f33595bd00c35679702bad0da7d46850f6e649c07bff7bcb5867f8c851405b0c44ea21d4a51c9c3c048b07b4cb82c814

  • SSDEEP

    6144:5njev/1zBh5Wfi/GOORjMmRUoooooooooooooooooooooooooy/G3:5nivxBh5Ki//OVLCoooooooooooooooT

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      5a7175b2bcb7e85c8a002e1982369770N.exe

    • Size

      280KB

    • MD5

      5a7175b2bcb7e85c8a002e1982369770

    • SHA1

      f487d814fde0d8ddf6856bd5ecd9ceef9bfd5527

    • SHA256

      5ddc1ca5544848ea3335428faf77e2c0cc567441a3b503a2d85e3d89e45f46e7

    • SHA512

      440be6f29d003c6704568a6eb3c436e7f33595bd00c35679702bad0da7d46850f6e649c07bff7bcb5867f8c851405b0c44ea21d4a51c9c3c048b07b4cb82c814

    • SSDEEP

      6144:5njev/1zBh5Wfi/GOORjMmRUoooooooooooooooooooooooooy/G3:5nivxBh5Ki//OVLCoooooooooooooooT

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks