Overview

overview

10

Static

static

3

c3a0891b3b...0N.exe

windows7-x64

10

c3a0891b3b...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3a0891b3bf7e3ccbbdc0a9825738010N

  • Size

    896KB

  • Sample

    240915-b4lqvayhlf

  • MD5

    c3a0891b3bf7e3ccbbdc0a9825738010

  • SHA1

    23e50e33c30b68e6f8a88677ab8a8da1efb5180a

  • SHA256

    81e00d1f9accdd708f905c75f114175dd56ed5629475282e6b88ce8b1162f35a

  • SHA512

    594c2b60339adcc3e4a874b7f57672c4074169320fa99f33514b9edb6df5dce243f477acd2af215860e7c529b9cee7f4288593177eac1b4dee8e77fb78e3b03a

  • SSDEEP

    12288:Ld/RFMusMH0QiRLsR4P377a20R01F50+5:J/RILX3a20R0v50+5

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      c3a0891b3bf7e3ccbbdc0a9825738010N

    • Size

      896KB

    • MD5

      c3a0891b3bf7e3ccbbdc0a9825738010

    • SHA1

      23e50e33c30b68e6f8a88677ab8a8da1efb5180a

    • SHA256

      81e00d1f9accdd708f905c75f114175dd56ed5629475282e6b88ce8b1162f35a

    • SHA512

      594c2b60339adcc3e4a874b7f57672c4074169320fa99f33514b9edb6df5dce243f477acd2af215860e7c529b9cee7f4288593177eac1b4dee8e77fb78e3b03a

    • SSDEEP

      12288:Ld/RFMusMH0QiRLsR4P377a20R01F50+5:J/RILX3a20R0v50+5

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks