Overview

overview

10

Static

static

3

0e779dfd98...db.exe

windows7-x64

10

0e779dfd98...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e779dfd98ee388ec58ed664a4335d0d2d555676d163c6e5456739bac3ba71db

  • Size

    80KB

  • Sample

    240913-xerfpascjr

  • MD5

    43ac8bf8303e6e9f785b651b00bd8ec7

  • SHA1

    6cb461130c54157739d742564167757425d64717

  • SHA256

    0e779dfd98ee388ec58ed664a4335d0d2d555676d163c6e5456739bac3ba71db

  • SHA512

    273d5f90983b7ea0aaf6a89cef5414bd56085ced12a1dbb8335898aa076bf424267b158a4a2265ef58ca8521650f2d5cffdb196c16bb40432f7d9f18e6c6f4cb

  • SSDEEP

    1536:xD89N+/C1Yg9F2kl/VxSPghk1IwRsTIg2LkaIZTJ+7LhkiB0:xDONwsVF2+WPgh4IwRsTGkaMU7ui

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      0e779dfd98ee388ec58ed664a4335d0d2d555676d163c6e5456739bac3ba71db

    • Size

      80KB

    • MD5

      43ac8bf8303e6e9f785b651b00bd8ec7

    • SHA1

      6cb461130c54157739d742564167757425d64717

    • SHA256

      0e779dfd98ee388ec58ed664a4335d0d2d555676d163c6e5456739bac3ba71db

    • SHA512

      273d5f90983b7ea0aaf6a89cef5414bd56085ced12a1dbb8335898aa076bf424267b158a4a2265ef58ca8521650f2d5cffdb196c16bb40432f7d9f18e6c6f4cb

    • SSDEEP

      1536:xD89N+/C1Yg9F2kl/VxSPghk1IwRsTIg2LkaIZTJ+7LhkiB0:xDONwsVF2+WPgh4IwRsTGkaMU7ui

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks