Overview

overview

7

Static

static

3

CloudChat.exe

windows7-x64

7

CloudChat.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    CloudChat.exe.v

  • Size

    99.8MB

  • Sample

    240915-k2kkfawbkb

  • MD5

    d053afcf73b4ac229529d8cdd999dd9b

  • SHA1

    ca2581369cb2984630f4fb2e68d754947150bfb3

  • SHA256

    f8b0df9434edfe90784601f35660db8da697d402d7fb2e6cd493802d5c3043d8

  • SHA512

    647e8fd87a649abd5a0232167d701a1ca3a1637b6336ddb300a67e0ebf774cb3f41ee607db131bc8204b9ba0f963f5ffcf2ac3f7b32ac7b8be2983666c6506e0

  • SSDEEP

    3145728:HL0ZqJWX98znkkk3/YXymM/QwSNvlrCOKi:r0ZkqizB1ym0QT9tv

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      CloudChat.exe.v

    • Size

      99.8MB

    • MD5

      d053afcf73b4ac229529d8cdd999dd9b

    • SHA1

      ca2581369cb2984630f4fb2e68d754947150bfb3

    • SHA256

      f8b0df9434edfe90784601f35660db8da697d402d7fb2e6cd493802d5c3043d8

    • SHA512

      647e8fd87a649abd5a0232167d701a1ca3a1637b6336ddb300a67e0ebf774cb3f41ee607db131bc8204b9ba0f963f5ffcf2ac3f7b32ac7b8be2983666c6506e0

    • SSDEEP

      3145728:HL0ZqJWX98znkkk3/YXymM/QwSNvlrCOKi:r0ZkqizB1ym0QT9tv

    Score
    7/10
    discoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks