Overview

overview

10

Static

static

3

e9e99ce16e...0N.exe

windows7-x64

10

e9e99ce16e...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9e99ce16ef9f59e46c3a219135e2590N

  • Size

    22KB

  • Sample

    240913-3z38wawhng

  • MD5

    e9e99ce16ef9f59e46c3a219135e2590

  • SHA1

    80d4a338f9b4ec48a4b8a794a1964d86dc3d2a53

  • SHA256

    2f833918d1fc99b5a4660148f1332f7539dd7a47673dfbf6d8a721188ce55b09

  • SHA512

    ff8c05e758c2663a26ebc1f6c18b571f1ce57961a3f1f1723ca54f2f6a8a8b833ee292f5fa01719938ac4b42691c2e829f0230b0053c1dce18d9d0cb1401a19f

  • SSDEEP

    384:ztGhPq/PSVoYZXgW8PK3mUarVMYVt8a6c6n5er7EgSgXuJDth0r:zt16VoYZwPK2UarVMYYaFbr799mHI

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      e9e99ce16ef9f59e46c3a219135e2590N

    • Size

      22KB

    • MD5

      e9e99ce16ef9f59e46c3a219135e2590

    • SHA1

      80d4a338f9b4ec48a4b8a794a1964d86dc3d2a53

    • SHA256

      2f833918d1fc99b5a4660148f1332f7539dd7a47673dfbf6d8a721188ce55b09

    • SHA512

      ff8c05e758c2663a26ebc1f6c18b571f1ce57961a3f1f1723ca54f2f6a8a8b833ee292f5fa01719938ac4b42691c2e829f0230b0053c1dce18d9d0cb1401a19f

    • SSDEEP

      384:ztGhPq/PSVoYZXgW8PK3mUarVMYVt8a6c6n5er7EgSgXuJDth0r:zt16VoYZwPK2UarVMYYaFbr799mHI

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks