Overview

overview

10

Static

static

3

4da8c085b9...0N.exe

windows7-x64

10

4da8c085b9...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4da8c085b9514632664c85d47d5c80f0N

  • Size

    128KB

  • Sample

    240914-ed9a1avgnk

  • MD5

    4da8c085b9514632664c85d47d5c80f0

  • SHA1

    3067b11b91e772d64d348f6e432f88270e1fa4dd

  • SHA256

    5e4756c3ee8edff91e19708e8b7d404e191ef40543a239ef99b27d56dc78c333

  • SHA512

    2e126ab5f71d341a002f357117bf739a812f2c57232e9c061746369cfe3e47fc9a0ab5065f61978bffad60fb1a4f5d49f5b92ef7bb0dbe1a9211eb4ed4e4ab17

  • SSDEEP

    3072:dKbPh+ivq2+4R/uPe+2KQO+zrIxFnB+dM:dKbP53/uPFQO+zrWnAdM

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      4da8c085b9514632664c85d47d5c80f0N

    • Size

      128KB

    • MD5

      4da8c085b9514632664c85d47d5c80f0

    • SHA1

      3067b11b91e772d64d348f6e432f88270e1fa4dd

    • SHA256

      5e4756c3ee8edff91e19708e8b7d404e191ef40543a239ef99b27d56dc78c333

    • SHA512

      2e126ab5f71d341a002f357117bf739a812f2c57232e9c061746369cfe3e47fc9a0ab5065f61978bffad60fb1a4f5d49f5b92ef7bb0dbe1a9211eb4ed4e4ab17

    • SSDEEP

      3072:dKbPh+ivq2+4R/uPe+2KQO+zrIxFnB+dM:dKbP53/uPFQO+zrWnAdM

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks