Overview

overview

10

Static

static

3

f61ce15932...eN.exe

windows7-x64

10

f61ce15932...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f61ce15932a097279a5be00b483f3746548fb07e62ab727903a1bf4c3bafabceN.exe

  • Size

    151KB

  • Sample

    241130-fv2g6aymdl

  • MD5

    e05302676414b6b7fa20174b6dba9ea0

  • SHA1

    3bd471d0b3c15fee81830528ff083360f76dfdde

  • SHA256

    f61ce15932a097279a5be00b483f3746548fb07e62ab727903a1bf4c3bafabce

  • SHA512

    d25aee18183380ea21bb5de3ffd8fef4ff1447fbc90583400ca2dca60c7849cc8c6fdd501b59e20f09d37e55d8c7668b6839f1d8013d0226459831f7debe5b4c

  • SSDEEP

    3072:voeKYCPFoio2aTpqYgVPAUSqlDCHLQtAcBWGAbdO9Z:weKY6o2aTpqbVP+5SBWlbyZ

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      f61ce15932a097279a5be00b483f3746548fb07e62ab727903a1bf4c3bafabceN.exe

    • Size

      151KB

    • MD5

      e05302676414b6b7fa20174b6dba9ea0

    • SHA1

      3bd471d0b3c15fee81830528ff083360f76dfdde

    • SHA256

      f61ce15932a097279a5be00b483f3746548fb07e62ab727903a1bf4c3bafabce

    • SHA512

      d25aee18183380ea21bb5de3ffd8fef4ff1447fbc90583400ca2dca60c7849cc8c6fdd501b59e20f09d37e55d8c7668b6839f1d8013d0226459831f7debe5b4c

    • SSDEEP

      3072:voeKYCPFoio2aTpqYgVPAUSqlDCHLQtAcBWGAbdO9Z:weKY6o2aTpqbVP+5SBWlbyZ

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks