Overview

overview

7

Static

static

3

WaterExecutor.exe

windows11-21h2-x64

7

agent.ps1

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    WaterExecutor.exe
  • Size 74.4MB
  • Sample260905-babc1scm8x
  • SHA256 71d324010546e51f652f09ccde562ef74e1d190c969adc05b10ae12702ac3c96
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasionexecutionpersistencepyinstaller

Malware Config

Targets

    • Target
      WaterExecutor.exe
    • Size 74.4MB
    • SHA256 71d324010546e51f652f09ccde562ef74e1d190c969adc05b10ae12702ac3c96
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasionexecutionpersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1
    • Target
      agent.pyc
    • Size 248KB
    • SHA256 0251e59b7e18500c68811a9cf81ce85f1cb6a3b297dac5c34a233501f822ae41
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks