Overview

overview

7

Static

static

3

5d7222d1cc...1d.exe

windows7-x64

7

5d7222d1cc...1d.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d7222d1cc8d61838885496ab9b86da43acdcd05c67ccdaa7025d2e65ca2781d

  • Size

    118KB

  • Sample

    241008-1zl89a1gjm

  • MD5

    6140b34f70a0a3112cecb8cd324a64d7

  • SHA1

    878dfbee59810a8d43b9c45196beb7cf0ec24f13

  • SHA256

    5d7222d1cc8d61838885496ab9b86da43acdcd05c67ccdaa7025d2e65ca2781d

  • SHA512

    603c2b82f2450f63eeb4f5725dbb53c5e111a0860e9a62adbc23ee8867fead9ec3bc14a9128deaeaee47ddd676eea834915328bff3f1abea3d0987a61358a524

  • SSDEEP

    3072:QOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPo:QIs9OKofHfHTXQLzgvnzHPowYbvrjD/h

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      5d7222d1cc8d61838885496ab9b86da43acdcd05c67ccdaa7025d2e65ca2781d

    • Size

      118KB

    • MD5

      6140b34f70a0a3112cecb8cd324a64d7

    • SHA1

      878dfbee59810a8d43b9c45196beb7cf0ec24f13

    • SHA256

      5d7222d1cc8d61838885496ab9b86da43acdcd05c67ccdaa7025d2e65ca2781d

    • SHA512

      603c2b82f2450f63eeb4f5725dbb53c5e111a0860e9a62adbc23ee8867fead9ec3bc14a9128deaeaee47ddd676eea834915328bff3f1abea3d0987a61358a524

    • SSDEEP

      3072:QOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPo:QIs9OKofHfHTXQLzgvnzHPowYbvrjD/h

    Score
    7/10
    discoverypersistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks