Overview

overview

7

Static

static

IDHSBC0F23...DF.exe

windows7_x64

7

IDHSBC0F23...DF.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    IDHSBC0F23255675-T01.PDF.exe

  • Size

    1.5MB

  • Sample

    200630-h876l3b6c2

  • MD5

    e1850574cfa39379efbe226004caca99

  • SHA1

    4d34f1871db05909f7e48faec720acca9b67779d

  • SHA256

    ecc34691e3df1c4c6fc2588efc33007d8c91ef155590280a9f022797ce571014

  • SHA512

    6ea4c3d5652d56d53b9cd280be1b9ee3b5d743cccd84944df7e04d59df1e94225de166876fee27e51b1c12c7ee46ae2895e1573357d9bde42b1f647432ca429b

Score
7/10

Malware Config

Targets

    • Target

      IDHSBC0F23255675-T01.PDF.exe

    • Size

      1.5MB

    • MD5

      e1850574cfa39379efbe226004caca99

    • SHA1

      4d34f1871db05909f7e48faec720acca9b67779d

    • SHA256

      ecc34691e3df1c4c6fc2588efc33007d8c91ef155590280a9f022797ce571014

    • SHA512

      6ea4c3d5652d56d53b9cd280be1b9ee3b5d743cccd84944df7e04d59df1e94225de166876fee27e51b1c12c7ee46ae2895e1573357d9bde42b1f647432ca429b

    Score
    7/10

    • Drops startup file

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Replication Through Removable Media

1
T1091

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Replication Through Removable Media

1
T1091

Collection

Exfiltration

Command and Control

Impact

Tasks