Overview

overview

10

Static

static

3

31885d5218...d8.exe

windows7-x64

10

31885d5218...d8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    31885d521892a4f1e62f6de2f81798281a76e28c570d268fecc8cd16690cbbd8

  • Size

    125KB

  • Sample

    241011-y2ldmawerq

  • MD5

    3f259489950f7310e87bfdcacb1be807

  • SHA1

    5d42c58009ff5b063de8f030b8878fb0b3da682f

  • SHA256

    31885d521892a4f1e62f6de2f81798281a76e28c570d268fecc8cd16690cbbd8

  • SHA512

    d7c969d999145ded0067c7cf8d2ebadbefca068416475c232b5d7f61c1b07e7971056ebcbf1121cee36e80e90533050ef6da440c7d2bb12e1f6823beb454353d

  • SSDEEP

    3072:F9e6aN1/sTWHy3YM1DvYx1Y/z3ewc41WdTCn93OGey/ZhJakrPF:TRo/a5vYxsz3ewcXTCndOGeKTaG

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      31885d521892a4f1e62f6de2f81798281a76e28c570d268fecc8cd16690cbbd8

    • Size

      125KB

    • MD5

      3f259489950f7310e87bfdcacb1be807

    • SHA1

      5d42c58009ff5b063de8f030b8878fb0b3da682f

    • SHA256

      31885d521892a4f1e62f6de2f81798281a76e28c570d268fecc8cd16690cbbd8

    • SHA512

      d7c969d999145ded0067c7cf8d2ebadbefca068416475c232b5d7f61c1b07e7971056ebcbf1121cee36e80e90533050ef6da440c7d2bb12e1f6823beb454353d

    • SSDEEP

      3072:F9e6aN1/sTWHy3YM1DvYx1Y/z3ewc41WdTCn93OGey/ZhJakrPF:TRo/a5vYxsz3ewcXTCndOGeKTaG

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks