Overview

overview

10

Static

static

3

36baa8ec7e...0N.exe

windows7-x64

10

36baa8ec7e...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    36baa8ec7e007a5321704b09ad65dbb0N

  • Size

    280KB

  • Sample

    240912-qlqdmswglm

  • MD5

    36baa8ec7e007a5321704b09ad65dbb0

  • SHA1

    7678f90bc5a4c18cce936b8c420b49852f028745

  • SHA256

    1afad82fa0e0e7f4bc9fed3f601f76ee38a36f83a296b1289c9c39aed315f46e

  • SHA512

    a981bee7990560afbe01593e4a0448694aa98930cf1a303a2adc825f2a404b59b11709652c3514d86b59a991715e7ced28339a1bc9615432c8fcf33d0c7c0653

  • SSDEEP

    6144:4EABVaiKNTWR/1qTi/GOORjMmRUoooooooooooooooooooooooooy/G3:4JBVaT011mi//OVLCooooooooooooooQ

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      36baa8ec7e007a5321704b09ad65dbb0N

    • Size

      280KB

    • MD5

      36baa8ec7e007a5321704b09ad65dbb0

    • SHA1

      7678f90bc5a4c18cce936b8c420b49852f028745

    • SHA256

      1afad82fa0e0e7f4bc9fed3f601f76ee38a36f83a296b1289c9c39aed315f46e

    • SHA512

      a981bee7990560afbe01593e4a0448694aa98930cf1a303a2adc825f2a404b59b11709652c3514d86b59a991715e7ced28339a1bc9615432c8fcf33d0c7c0653

    • SSDEEP

      6144:4EABVaiKNTWR/1qTi/GOORjMmRUoooooooooooooooooooooooooy/G3:4JBVaT011mi//OVLCooooooooooooooQ

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks