Overview

overview

10

Static

static

3

a33e1f4880...92.exe

windows7-x64

10

a33e1f4880...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a33e1f4880226ca747c08619122d685345ba3496e306e97fd27be591723af792

  • Size

    390KB

  • Sample

    240901-a92tkswang

  • MD5

    2a3f21968631c4d0d42d05917e9cb913

  • SHA1

    111f1e957926c3a5a5b4a14ed4291a172d8a5d87

  • SHA256

    a33e1f4880226ca747c08619122d685345ba3496e306e97fd27be591723af792

  • SHA512

    dde05edce0249c2f9ad92bc6a584f2bbad256115a0fb91150cb3d0e2d3b98718764af5e8391f1a6cd1559a015ae2b0c0cf61217f00cad045ee9d283bded8f738

  • SSDEEP

    3072:NcR+XuhLQLyds+mB66+bWQALHLQGAZzasJR/X4a+SFkVsYtTHTMT5NeVWmjjGF:lLyGB66CbArLAZ26RQSFSTHAjhV

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      a33e1f4880226ca747c08619122d685345ba3496e306e97fd27be591723af792

    • Size

      390KB

    • MD5

      2a3f21968631c4d0d42d05917e9cb913

    • SHA1

      111f1e957926c3a5a5b4a14ed4291a172d8a5d87

    • SHA256

      a33e1f4880226ca747c08619122d685345ba3496e306e97fd27be591723af792

    • SHA512

      dde05edce0249c2f9ad92bc6a584f2bbad256115a0fb91150cb3d0e2d3b98718764af5e8391f1a6cd1559a015ae2b0c0cf61217f00cad045ee9d283bded8f738

    • SSDEEP

      3072:NcR+XuhLQLyds+mB66+bWQALHLQGAZzasJR/X4a+SFkVsYtTHTMT5NeVWmjjGF:lLyGB66CbArLAZ26RQSFSTHAjhV

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks