Overview

overview

8

Static

static

1

procexp.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    procexp.exe

  • Size

    4.3MB

  • Sample

    240930-1ypmzs1drb

  • MD5

    94c60e6704b5dd11a139f2ffebde9135

  • SHA1

    cd89f1cf9428a3eab554a3eb9ff6ca869e5bc368

  • SHA256

    106bf123359d03963b1df1011fb8560aaf1c5e811de775dce1d8a53758a69102

  • SHA512

    586bf326eae890379fcc7ad60e0a70384d069898aea46da32baf6bd60854df97b461019beaf17744ba3dfc0e70eb75970b977c30f035d296ae89763605d4ff6d

  • SSDEEP

    49152:cGNq7FBhpRWa3viMRIcDdxw6dXF3W1QrL1UDq3P8mlp4DOXUxm:cGejpRWafEkRW6OHmrZXt

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      procexp.exe

    • Size

      4.3MB

    • MD5

      94c60e6704b5dd11a139f2ffebde9135

    • SHA1

      cd89f1cf9428a3eab554a3eb9ff6ca869e5bc368

    • SHA256

      106bf123359d03963b1df1011fb8560aaf1c5e811de775dce1d8a53758a69102

    • SHA512

      586bf326eae890379fcc7ad60e0a70384d069898aea46da32baf6bd60854df97b461019beaf17744ba3dfc0e70eb75970b977c30f035d296ae89763605d4ff6d

    • SSDEEP

      49152:cGNq7FBhpRWa3viMRIcDdxw6dXF3W1QrL1UDq3P8mlp4DOXUxm:cGejpRWafEkRW6OHmrZXt

    Score
    8/10
    discoverypersistence

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks