Overview

overview

10

Static

static

3

a35a2648e9...7N.exe

windows7-x64

10

a35a2648e9...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a35a2648e9c5f0c24e5f2ce724b3b7b4293f61e1a315fe5c912f19cf601bf007N

  • Size

    1.3MB

  • Sample

    241002-bzhhma1anq

  • MD5

    41f3ee5162029ac17694806cf4e29940

  • SHA1

    97e378b0b451ede65063fb336da8f550b583ce8a

  • SHA256

    a35a2648e9c5f0c24e5f2ce724b3b7b4293f61e1a315fe5c912f19cf601bf007

  • SHA512

    789996c65d5bf707eb9142de7b88803198705b6b9561770a314450b598f333e0821abd7683426752c12d65fa019ae294f4d971911c9215c9fccc096240ebb5cc

  • SSDEEP

    24576:9SZ+J3rtih2XY/vK2Rk4stL2KEdAlzOev0X9bgr4xXWS:eKrsh2r2VstL2vdAVOevyxXWS

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      a35a2648e9c5f0c24e5f2ce724b3b7b4293f61e1a315fe5c912f19cf601bf007N

    • Size

      1.3MB

    • MD5

      41f3ee5162029ac17694806cf4e29940

    • SHA1

      97e378b0b451ede65063fb336da8f550b583ce8a

    • SHA256

      a35a2648e9c5f0c24e5f2ce724b3b7b4293f61e1a315fe5c912f19cf601bf007

    • SHA512

      789996c65d5bf707eb9142de7b88803198705b6b9561770a314450b598f333e0821abd7683426752c12d65fa019ae294f4d971911c9215c9fccc096240ebb5cc

    • SSDEEP

      24576:9SZ+J3rtih2XY/vK2Rk4stL2KEdAlzOev0X9bgr4xXWS:eKrsh2r2VstL2vdAVOevyxXWS

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks