Overview

overview

10

Static

static

7

3b9d1e7973...cN.exe

windows7-x64

10

3b9d1e7973...cN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b9d1e79736710d132f8232fa80e1209a27867699838d6173dbbce3da54be52cN.exe

  • Size

    413KB

  • Sample

    241122-kzftgaxqct

  • MD5

    0d01a73536a662362d448ca3602ec460

  • SHA1

    cf5c75eea0f1e4b64cff93b2c0996ed73635d6a3

  • SHA256

    3b9d1e79736710d132f8232fa80e1209a27867699838d6173dbbce3da54be52c

  • SHA512

    5879dd34bd7ef508034ed48d5d81639be573b4debddd6fc39a5443d7f5e921b06b4d36232e7ddc7131a30e602d8d6157676a7963eeca9fa4a5da3e068c3833bd

  • SSDEEP

    12288:UP6ys+NgzZhkDjh8rxUGTinVfpvIzKVHU:ABNUfkWlUGunVfh0KVHU

Score
10/10
aspackv2discoveryevasion

Malware Config

Targets

    • Target

      3b9d1e79736710d132f8232fa80e1209a27867699838d6173dbbce3da54be52cN.exe

    • Size

      413KB

    • MD5

      0d01a73536a662362d448ca3602ec460

    • SHA1

      cf5c75eea0f1e4b64cff93b2c0996ed73635d6a3

    • SHA256

      3b9d1e79736710d132f8232fa80e1209a27867699838d6173dbbce3da54be52c

    • SHA512

      5879dd34bd7ef508034ed48d5d81639be573b4debddd6fc39a5443d7f5e921b06b4d36232e7ddc7131a30e602d8d6157676a7963eeca9fa4a5da3e068c3833bd

    • SSDEEP

      12288:UP6ys+NgzZhkDjh8rxUGTinVfpvIzKVHU:ABNUfkWlUGunVfh0KVHU

    Score
    10/10
    discoveryevasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks