Overview

overview

10

Static

static

3

3e926e1445...fN.exe

windows7-x64

10

3e926e1445...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e926e144582b99e5c4aa1f6989bd1f96fe6b37e3858174e67e1af851df1280fN

  • Size

    2.6MB

  • Sample

    241002-bt6y2azgjr

  • MD5

    86d990c85f15c81131a6ed64586dcf70

  • SHA1

    4a19397eecce203f2f9cf3dea0e3140c851eeaa9

  • SHA256

    3e926e144582b99e5c4aa1f6989bd1f96fe6b37e3858174e67e1af851df1280f

  • SHA512

    cb8beae25836e06177678aae2debf68f09f71dea567e4ed14887830461f2a2193f137b9c9c2425735ad142e340d149b9ca82034799de79a26b5d4113af0af9a7

  • SSDEEP

    49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/+:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/+

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      3e926e144582b99e5c4aa1f6989bd1f96fe6b37e3858174e67e1af851df1280fN

    • Size

      2.6MB

    • MD5

      86d990c85f15c81131a6ed64586dcf70

    • SHA1

      4a19397eecce203f2f9cf3dea0e3140c851eeaa9

    • SHA256

      3e926e144582b99e5c4aa1f6989bd1f96fe6b37e3858174e67e1af851df1280f

    • SHA512

      cb8beae25836e06177678aae2debf68f09f71dea567e4ed14887830461f2a2193f137b9c9c2425735ad142e340d149b9ca82034799de79a26b5d4113af0af9a7

    • SSDEEP

      49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/+:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/+

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks