Overview

overview

8

Static

static

3

Driver.exe

windows11-21h2-x64

8

Resubmissions

01-09-2024 04:15

240901-evn2ds1grh 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Driver.exe

  • Size

    3.1MB

  • Sample

    240901-evn2ds1grh

  • MD5

    f505cbcab0670a376c866de177a5c097

  • SHA1

    18ded789bc554fda5941aa2707df9a78de44c7c5

  • SHA256

    7be04791df7cc79fc8427098bf9e3c11206e54d2d613d470e4b4d5855451e816

  • SHA512

    d1214d5188315466105713e509e8ba777eb9e89ba6fbfc5a0244314cd6607f6c1f7d265f468daba0114a9116ec4d480c515897d9288f2c9c304efc3637f0074e

  • SSDEEP

    49152:jNJb0uRDKiHjoapN8J827nsjoRf8HIjkpr6PbdVKeO3dFIyKc+Kq:joKDfD4827MoRf8HnUdyd+yKn

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      Driver.exe

    • Size

      3.1MB

    • MD5

      f505cbcab0670a376c866de177a5c097

    • SHA1

      18ded789bc554fda5941aa2707df9a78de44c7c5

    • SHA256

      7be04791df7cc79fc8427098bf9e3c11206e54d2d613d470e4b4d5855451e816

    • SHA512

      d1214d5188315466105713e509e8ba777eb9e89ba6fbfc5a0244314cd6607f6c1f7d265f468daba0114a9116ec4d480c515897d9288f2c9c304efc3637f0074e

    • SSDEEP

      49152:jNJb0uRDKiHjoapN8J827nsjoRf8HIjkpr6PbdVKeO3dFIyKc+Kq:joKDfD4827MoRf8HnUdyd+yKn

    Score
    8/10
    discoverypersistence

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks