Overview

overview

10

Static

static

3

567317156a...0N.exe

windows7-x64

10

567317156a...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    567317156aebcf98a95feaec1e8d51a0N.exe

  • Size

    44KB

  • Sample

    240914-xvs98a1alk

  • MD5

    567317156aebcf98a95feaec1e8d51a0

  • SHA1

    f8c750c1d4c1e8507d58c79ea48da798edb2889d

  • SHA256

    02416b68bb0916b4bbd533b1bc62334b45aa243c5acba8784f344698b9cb3f93

  • SHA512

    823bf6e06d80249cac1cf687138b1cf793e41f462a4227a264b7192e9505805d61d5ec5212876ec3070ae6d5fae5f1ba56ee8b288cb1b6c317ead0d025094051

  • SSDEEP

    768:mTAm5hiTllzeF/AJOTmbWa8RYdiU3/7Shy5nv9/B39lQrGJ6JI:mLIcNTcWATPuhI9lABI

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      567317156aebcf98a95feaec1e8d51a0N.exe

    • Size

      44KB

    • MD5

      567317156aebcf98a95feaec1e8d51a0

    • SHA1

      f8c750c1d4c1e8507d58c79ea48da798edb2889d

    • SHA256

      02416b68bb0916b4bbd533b1bc62334b45aa243c5acba8784f344698b9cb3f93

    • SHA512

      823bf6e06d80249cac1cf687138b1cf793e41f462a4227a264b7192e9505805d61d5ec5212876ec3070ae6d5fae5f1ba56ee8b288cb1b6c317ead0d025094051

    • SSDEEP

      768:mTAm5hiTllzeF/AJOTmbWa8RYdiU3/7Shy5nv9/B39lQrGJ6JI:mLIcNTcWATPuhI9lABI

    Score
    10/10
    discoveryevasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks