Overview

overview

10

Static

static

3

2e59098d1c...06.exe

windows7-x64

10

2e59098d1c...06.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e59098d1c34347d57331e0cb4edda082c15efc924fc1731450d2d65baa81706

  • Size

    131KB

  • Sample

    240920-3t8leavgpp

  • MD5

    b1d059899d1d8007dc2b26e970bc753e

  • SHA1

    3d6a401baa1e9a496ed297720de6fed97e401ab5

  • SHA256

    2e59098d1c34347d57331e0cb4edda082c15efc924fc1731450d2d65baa81706

  • SHA512

    859ba224af4bf40c22fed6d5cd4a7ff66c13bfa34640344f70f4c4e1749db73d5ac0e5c68184a7e4f565feeb3ba090759d08071c23c94f41492ebc6cb21c980f

  • SSDEEP

    768:6pQNwC3BEddsEqOt/hydxyFtwLR+7DSdAwV3BEW+OB:6eTce/U/hah36qdpB

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      2e59098d1c34347d57331e0cb4edda082c15efc924fc1731450d2d65baa81706

    • Size

      131KB

    • MD5

      b1d059899d1d8007dc2b26e970bc753e

    • SHA1

      3d6a401baa1e9a496ed297720de6fed97e401ab5

    • SHA256

      2e59098d1c34347d57331e0cb4edda082c15efc924fc1731450d2d65baa81706

    • SHA512

      859ba224af4bf40c22fed6d5cd4a7ff66c13bfa34640344f70f4c4e1749db73d5ac0e5c68184a7e4f565feeb3ba090759d08071c23c94f41492ebc6cb21c980f

    • SSDEEP

      768:6pQNwC3BEddsEqOt/hydxyFtwLR+7DSdAwV3BEW+OB:6eTce/U/hah36qdpB

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks