Overview

overview

10

Static

static

3

c05a817a0d...0N.exe

windows7-x64

10

c05a817a0d...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c05a817a0d170e19663a6b0a79defa60N.exe

  • Size

    112KB

  • Sample

    240901-gc1zcatbrf

  • MD5

    c05a817a0d170e19663a6b0a79defa60

  • SHA1

    9850954af5fc2e023e030d2db179746223931ef3

  • SHA256

    ebdfb9cbccc4907b6005ece6852efd884acbfa5adbfe289b73eccf0e9ff7e778

  • SHA512

    ffccf677a0894439c3cabc40ea467d9662b77cba4938e4483c28bbe76a493eb66966af396873ec3934257139fca664bfb92f8efd87dd06168c8102b76e027319

  • SSDEEP

    3072:Pv+Nkj+PuMXqCtq2TJCYFeJLCQnFIBOaCUjKaVLjd:H+qym0rPT0YFeJLbnCBbC+nVLjd

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      c05a817a0d170e19663a6b0a79defa60N.exe

    • Size

      112KB

    • MD5

      c05a817a0d170e19663a6b0a79defa60

    • SHA1

      9850954af5fc2e023e030d2db179746223931ef3

    • SHA256

      ebdfb9cbccc4907b6005ece6852efd884acbfa5adbfe289b73eccf0e9ff7e778

    • SHA512

      ffccf677a0894439c3cabc40ea467d9662b77cba4938e4483c28bbe76a493eb66966af396873ec3934257139fca664bfb92f8efd87dd06168c8102b76e027319

    • SSDEEP

      3072:Pv+Nkj+PuMXqCtq2TJCYFeJLCQnFIBOaCUjKaVLjd:H+qym0rPT0YFeJLbnCBbC+nVLjd

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks