Overview

overview

10

Static

static

3

b1f432fcfc...aN.exe

windows7-x64

10

b1f432fcfc...aN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1f432fcfc0c6e28c399ac67db87ed8a1613658b273ea7c3b3abcf27514c9e5aN

  • Size

    224KB

  • Sample

    241009-hdyq2stbmb

  • MD5

    550c496a5fbd6f4f6c015baa43b9f540

  • SHA1

    f254b67bc348f61ba0ec1f8652b992838f2d2c86

  • SHA256

    b1f432fcfc0c6e28c399ac67db87ed8a1613658b273ea7c3b3abcf27514c9e5a

  • SHA512

    1ec1e7f507bd0528e859440c38d841999297995e05a13a1e49e2c7cf0a52a820723ee34f554da2cdd1280cbf9e20a459fd9e629a0c481ffb922fb4a2626f742b

  • SSDEEP

    3072:osxgcBo7vAiVzgzL20WKFcp9jRV5C/8qy4p2Y7YWlt63cp9jRV5q:osTBo7bBgzL2V4cpC0L4AY7YWT63cpq

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      b1f432fcfc0c6e28c399ac67db87ed8a1613658b273ea7c3b3abcf27514c9e5aN

    • Size

      224KB

    • MD5

      550c496a5fbd6f4f6c015baa43b9f540

    • SHA1

      f254b67bc348f61ba0ec1f8652b992838f2d2c86

    • SHA256

      b1f432fcfc0c6e28c399ac67db87ed8a1613658b273ea7c3b3abcf27514c9e5a

    • SHA512

      1ec1e7f507bd0528e859440c38d841999297995e05a13a1e49e2c7cf0a52a820723ee34f554da2cdd1280cbf9e20a459fd9e629a0c481ffb922fb4a2626f742b

    • SSDEEP

      3072:osxgcBo7vAiVzgzL20WKFcp9jRV5C/8qy4p2Y7YWlt63cp9jRV5q:osTBo7bBgzL2V4cpC0L4AY7YWT63cpq

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks