Overview

overview

8

Static

static

1

4b9e500682...ed.exe

windows7-x64

8

4b9e500682...ed.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b9e500682041eeffc48d0241c83dedc47a593c641a7c0cd46c58c61932545ed.exe

  • Size

    81KB

  • Sample

    241002-bmhmvszcql

  • MD5

    1fccd3a2dd40422221a213532cb66fdf

  • SHA1

    6e266cf7fb25b719765310055ffdb1ea76c2d54e

  • SHA256

    4b9e500682041eeffc48d0241c83dedc47a593c641a7c0cd46c58c61932545ed

  • SHA512

    93e0f4449ae63f5df429c00d11608cc440079cd3de6b255887bc466a088794d1dfa020e49f6171f922a1aa2d0f48f0837fb0c1e5ef43c5d8e1386954f1915d5e

  • SSDEEP

    1536:JoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaxPBJYYX7gxD1:TenkyfPAwiMq0RqRfbaxZJYYX0

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      4b9e500682041eeffc48d0241c83dedc47a593c641a7c0cd46c58c61932545ed.exe

    • Size

      81KB

    • MD5

      1fccd3a2dd40422221a213532cb66fdf

    • SHA1

      6e266cf7fb25b719765310055ffdb1ea76c2d54e

    • SHA256

      4b9e500682041eeffc48d0241c83dedc47a593c641a7c0cd46c58c61932545ed

    • SHA512

      93e0f4449ae63f5df429c00d11608cc440079cd3de6b255887bc466a088794d1dfa020e49f6171f922a1aa2d0f48f0837fb0c1e5ef43c5d8e1386954f1915d5e

    • SSDEEP

      1536:JoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaxPBJYYX7gxD1:TenkyfPAwiMq0RqRfbaxZJYYX0

    Score
    8/10
    discoverypersistence

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Sets service image path in registry

      persistence

    • Downloads MZ/PE file

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks