Overview

overview

10

Static

static

3

d2aa622336...8N.exe

windows7-x64

10

d2aa622336...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2aa6223364324e69784314ba7d961faf2018cdda11e385f0481933b3d59ec18N

  • Size

    128KB

  • Sample

    240920-gwtpdasfmj

  • MD5

    78090ef4bfc6cf47c2abb36639bf2690

  • SHA1

    4d4d3278bda005cb28407c65d7bda682f0ff95b5

  • SHA256

    d2aa6223364324e69784314ba7d961faf2018cdda11e385f0481933b3d59ec18

  • SHA512

    fab6adbc1d4bdfb89847a8c48ec59d7d6d7784762afb35c16dd4c1ec7165919b2cb6be101ff7fc97c75047a871133fdb3d8b56f0fd431c49a846486f86ccaad6

  • SSDEEP

    3072:8UjEH1kbFKYmRSy/OG1r95JDoeAk7DxSvITW/cbFGS9n:8UuxY/y/v1rjJPAohCw9n

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      d2aa6223364324e69784314ba7d961faf2018cdda11e385f0481933b3d59ec18N

    • Size

      128KB

    • MD5

      78090ef4bfc6cf47c2abb36639bf2690

    • SHA1

      4d4d3278bda005cb28407c65d7bda682f0ff95b5

    • SHA256

      d2aa6223364324e69784314ba7d961faf2018cdda11e385f0481933b3d59ec18

    • SHA512

      fab6adbc1d4bdfb89847a8c48ec59d7d6d7784762afb35c16dd4c1ec7165919b2cb6be101ff7fc97c75047a871133fdb3d8b56f0fd431c49a846486f86ccaad6

    • SSDEEP

      3072:8UjEH1kbFKYmRSy/OG1r95JDoeAk7DxSvITW/cbFGS9n:8UuxY/y/v1rjJPAohCw9n

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks