Overview

overview

10

Static

static

3

f3057c7f11...ac.exe

windows7-x64

10

f3057c7f11...ac.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f3057c7f1160cf34b80d92ce949b606539b93f9b6bd1cbc4e1c5fbb9889b08ac

  • Size

    1.3MB

  • Sample

    240911-expqpsscql

  • MD5

    5b78c084bb5ede3b1c906a7de77cdaf9

  • SHA1

    1b3b435983b54810673eaefb15b09e310715007e

  • SHA256

    f3057c7f1160cf34b80d92ce949b606539b93f9b6bd1cbc4e1c5fbb9889b08ac

  • SHA512

    849c47976bc4e9fbc9dec6870891f65631e19482a723e1d35272f679cdfbc42fed492cfa37c28f421a83e69baa015cdb1b0d833a47a5a335b0633046e7c83e95

  • SSDEEP

    24576:RmayNPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oW:YayFbazR0vKLXZ

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      f3057c7f1160cf34b80d92ce949b606539b93f9b6bd1cbc4e1c5fbb9889b08ac

    • Size

      1.3MB

    • MD5

      5b78c084bb5ede3b1c906a7de77cdaf9

    • SHA1

      1b3b435983b54810673eaefb15b09e310715007e

    • SHA256

      f3057c7f1160cf34b80d92ce949b606539b93f9b6bd1cbc4e1c5fbb9889b08ac

    • SHA512

      849c47976bc4e9fbc9dec6870891f65631e19482a723e1d35272f679cdfbc42fed492cfa37c28f421a83e69baa015cdb1b0d833a47a5a335b0633046e7c83e95

    • SSDEEP

      24576:RmayNPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oW:YayFbazR0vKLXZ

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks