Overview

overview

10

Static

static

3

07cdb12593...0N.exe

windows7-x64

10

07cdb12593...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07cdb125937acc27f11cfb5594c495e0N

  • Size

    72KB

  • Sample

    240914-b43dlazhkm

  • MD5

    07cdb125937acc27f11cfb5594c495e0

  • SHA1

    5cf946976f4858123ae70547f0e60138cd4db0d7

  • SHA256

    27bb45fc86d8fa8507ef2c7e4c1b91977da2be8ac0055b1f951883f6124dc2f6

  • SHA512

    dd3ebf0f6d3e3cce9bedf290f9612290f168aae1774da10ec2995421c5c5da68df8f3f5b15b165dfae940e910bb5f1e177eb49306ee0c992f6c470be78bbed96

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2g:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrP0

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      07cdb125937acc27f11cfb5594c495e0N

    • Size

      72KB

    • MD5

      07cdb125937acc27f11cfb5594c495e0

    • SHA1

      5cf946976f4858123ae70547f0e60138cd4db0d7

    • SHA256

      27bb45fc86d8fa8507ef2c7e4c1b91977da2be8ac0055b1f951883f6124dc2f6

    • SHA512

      dd3ebf0f6d3e3cce9bedf290f9612290f168aae1774da10ec2995421c5c5da68df8f3f5b15b165dfae940e910bb5f1e177eb49306ee0c992f6c470be78bbed96

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2g:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrP0

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks