Overview

overview

10

Static

static

5

1fc2620360...6N.exe

windows7-x64

10

1fc2620360...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1fc2620360ef48e4ffa970406893a2ebf9204ff6ff9a3287166c91ec108340c6N

  • Size

    4.2MB

  • Sample

    240920-2z1bjstbpm

  • MD5

    1ac6ed017ab1639e71cc7f17cd3e45a0

  • SHA1

    272bfa70c4c7b6c219fa889f2d0b578cd721178a

  • SHA256

    1fc2620360ef48e4ffa970406893a2ebf9204ff6ff9a3287166c91ec108340c6

  • SHA512

    5015a1457f36fe2e278fae11375af7d22fe6bfd219a33b719754b6b0e23aed0369d3500e73445ef4bc1afb4b800b6e815c8e8b30fc77c984f42596fe72249c08

  • SSDEEP

    49152:SeJfAJGpLSywbqS5zuU18PZ0b0uf73Dlfu5m7Jv5MXS:SeVAJUnBSz718duhpJYS

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      1fc2620360ef48e4ffa970406893a2ebf9204ff6ff9a3287166c91ec108340c6N

    • Size

      4.2MB

    • MD5

      1ac6ed017ab1639e71cc7f17cd3e45a0

    • SHA1

      272bfa70c4c7b6c219fa889f2d0b578cd721178a

    • SHA256

      1fc2620360ef48e4ffa970406893a2ebf9204ff6ff9a3287166c91ec108340c6

    • SHA512

      5015a1457f36fe2e278fae11375af7d22fe6bfd219a33b719754b6b0e23aed0369d3500e73445ef4bc1afb4b800b6e815c8e8b30fc77c984f42596fe72249c08

    • SSDEEP

      49152:SeJfAJGpLSywbqS5zuU18PZ0b0uf73Dlfu5m7Jv5MXS:SeVAJUnBSz718duhpJYS

    Score
    10/10
    discoveryevasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks