Overview

overview

10

Static

static

3

e263a4b4d6...99.exe

windows7-x64

10

e263a4b4d6...99.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e263a4b4d631f2b1149a64ead82e43f66991e8bb9a730d3dcbc3dd5bd309a999

  • Size

    57KB

  • Sample

    240912-nbj3rstajq

  • MD5

    50b604c6f04c7ab4f4a725505d0d6824

  • SHA1

    8a15ff4ca9084c52cb7f055c58f35f2fed0452e5

  • SHA256

    e263a4b4d631f2b1149a64ead82e43f66991e8bb9a730d3dcbc3dd5bd309a999

  • SHA512

    cb6148eac6be21247a4229a9e409a7c3d5449294957a9d16da38f5a46af9f4e0614b85ef1b10032e6ae6854cc252a6ece41148ee4f8c94c6d0264937035cf647

  • SSDEEP

    768:FjtLRAaK4wx6ERF/czaGz9f/iXz8lNWlQ32BLj+uIppkS4Fy/bbKLJV5Rwdn7hs7:vI48RceGx/iDg32V4CJVGwIj

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      e263a4b4d631f2b1149a64ead82e43f66991e8bb9a730d3dcbc3dd5bd309a999

    • Size

      57KB

    • MD5

      50b604c6f04c7ab4f4a725505d0d6824

    • SHA1

      8a15ff4ca9084c52cb7f055c58f35f2fed0452e5

    • SHA256

      e263a4b4d631f2b1149a64ead82e43f66991e8bb9a730d3dcbc3dd5bd309a999

    • SHA512

      cb6148eac6be21247a4229a9e409a7c3d5449294957a9d16da38f5a46af9f4e0614b85ef1b10032e6ae6854cc252a6ece41148ee4f8c94c6d0264937035cf647

    • SSDEEP

      768:FjtLRAaK4wx6ERF/czaGz9f/iXz8lNWlQ32BLj+uIppkS4Fy/bbKLJV5Rwdn7hs7:vI48RceGx/iDg32V4CJVGwIj

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks