Overview

overview

10

Static

static

3

de3c82d259...f0.exe

windows7-x64

10

de3c82d259...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de3c82d2591a0af5a0843d7e3a2a67fa10dcc74e8bae58f6be17170b637505f0

  • Size

    108KB

  • Sample

    240701-d6yvasverh

  • MD5

    e811507817221dcabab3832966e022fb

  • SHA1

    c16f95b27367410292e9d674807ccd5055c36b12

  • SHA256

    de3c82d2591a0af5a0843d7e3a2a67fa10dcc74e8bae58f6be17170b637505f0

  • SHA512

    4d88f32459043fa200fd82b2bad1df4c11691df027fc1bc8ae0a676614604105ea2a3655cd26862c51b2d1f1dfd5bdfd0d470345562bf478c6fd5c82bfbf90ae

  • SSDEEP

    3072:dCjM6LtiuwAqXoW+NGQO5FcFmKcUsvKwF:dCjM6Bwt+yBUs

Score
10/10
persistence

Malware Config

Targets

    • Target

      de3c82d2591a0af5a0843d7e3a2a67fa10dcc74e8bae58f6be17170b637505f0

    • Size

      108KB

    • MD5

      e811507817221dcabab3832966e022fb

    • SHA1

      c16f95b27367410292e9d674807ccd5055c36b12

    • SHA256

      de3c82d2591a0af5a0843d7e3a2a67fa10dcc74e8bae58f6be17170b637505f0

    • SHA512

      4d88f32459043fa200fd82b2bad1df4c11691df027fc1bc8ae0a676614604105ea2a3655cd26862c51b2d1f1dfd5bdfd0d470345562bf478c6fd5c82bfbf90ae

    • SSDEEP

      3072:dCjM6LtiuwAqXoW+NGQO5FcFmKcUsvKwF:dCjM6Bwt+yBUs

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks