Overview

overview

10

Static

static

10

Batman_ATK_Ware.exe

windows7-x64

10

Batman_ATK_Ware.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Batman_ATK_Ware.exe

  • Size

    6.4MB

  • Sample

    241113-ax3kcasqcy

  • MD5

    e3e7697d0a03ef75f3d25fc45f6fe83f

  • SHA1

    e986a4c0d9f19fa87ca3736ee5c7563c39b1a8f7

  • SHA256

    672080994fc581f09c4e199731f118b1ad2082f8820fdb6073a431892ed0f1b7

  • SHA512

    28febc863d94a98bbef7b05854312befa40989251304bc46c76e67112e4e6aff5fc9bd90857c05e08d949dbc809d0b150827eb6847aca501ccfc8c68ea77a5b6

  • SSDEEP

    196608:CRuig9hoy6Enwc4GgpG0REca3Irq7LkmrbW3jmrT:Cci+WyotGgpGLcW7AmrbmyrT

Score
10/10
blankgrabberdiscoveryevasionpersistence

Malware Config

Targets

    • Target

      Batman_ATK_Ware.exe

    • Size

      6.4MB

    • MD5

      e3e7697d0a03ef75f3d25fc45f6fe83f

    • SHA1

      e986a4c0d9f19fa87ca3736ee5c7563c39b1a8f7

    • SHA256

      672080994fc581f09c4e199731f118b1ad2082f8820fdb6073a431892ed0f1b7

    • SHA512

      28febc863d94a98bbef7b05854312befa40989251304bc46c76e67112e4e6aff5fc9bd90857c05e08d949dbc809d0b150827eb6847aca501ccfc8c68ea77a5b6

    • SSDEEP

      196608:CRuig9hoy6Enwc4GgpG0REca3Irq7LkmrbW3jmrT:Cci+WyotGgpGLcW7AmrbmyrT

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks