Overview

overview

8

Static

static

3

69be5428a0...11.exe

windows7-x64

8

69be5428a0...11.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69be5428a0e939a5bf4453b34aad1a86791ab75411b6a339d727197f82bc8411

  • Size

    701KB

  • Sample

    241216-tymeaswkcn

  • MD5

    5890798f97f9144206499433a5db3011

  • SHA1

    1c9c488123a81bf8d2216ac57c089e056f899433

  • SHA256

    69be5428a0e939a5bf4453b34aad1a86791ab75411b6a339d727197f82bc8411

  • SHA512

    964f340060a67abed11d06ac40cb8cb2577f985e8815cc12f306e37a716792ae8edac02645d0cddeea5d81f72ef402363c909b6f510eb2a37c76f1cf56caada9

  • SSDEEP

    6144:57A/MmghsENIsRctX5rUvQSNj0LZOWM8yucn:5U/Mv0rU1Nj0LZOd8yus

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      69be5428a0e939a5bf4453b34aad1a86791ab75411b6a339d727197f82bc8411

    • Size

      701KB

    • MD5

      5890798f97f9144206499433a5db3011

    • SHA1

      1c9c488123a81bf8d2216ac57c089e056f899433

    • SHA256

      69be5428a0e939a5bf4453b34aad1a86791ab75411b6a339d727197f82bc8411

    • SHA512

      964f340060a67abed11d06ac40cb8cb2577f985e8815cc12f306e37a716792ae8edac02645d0cddeea5d81f72ef402363c909b6f510eb2a37c76f1cf56caada9

    • SSDEEP

      6144:57A/MmghsENIsRctX5rUvQSNj0LZOWM8yucn:5U/Mv0rU1Nj0LZOd8yus

    Score
    8/10
    discoverypersistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks