Overview

overview

10

Static

static

3

da513a6e4f...c2.exe

windows7-x64

10

da513a6e4f...c2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da513a6e4fad28414718acbd7c2389ee1e0951c9059cd043eedac365da6369c2

  • Size

    94KB

  • Sample

    240701-dzj3kayaqm

  • MD5

    d84bfe69cb448f6606e69869dc602f2e

  • SHA1

    87bba3434d580141b773e5689c7a5b0c91ebae9a

  • SHA256

    da513a6e4fad28414718acbd7c2389ee1e0951c9059cd043eedac365da6369c2

  • SHA512

    3664591b8b8d33ec26c903fa2f8eb2eeddd385c268a55637aee541330adbd500d70da0444768259881c58a44294e704dbe64f29c462c68083221d75722ec3a12

  • SSDEEP

    1536:PmRyOZtln6rP+T+V0h10Ly0QK2LYaIZTJ+7LhkiB0MPiKeEAgv:eFZ9t1Cy/YaMU7uihJ5v

Score
10/10
persistence

Malware Config

Targets

    • Target

      da513a6e4fad28414718acbd7c2389ee1e0951c9059cd043eedac365da6369c2

    • Size

      94KB

    • MD5

      d84bfe69cb448f6606e69869dc602f2e

    • SHA1

      87bba3434d580141b773e5689c7a5b0c91ebae9a

    • SHA256

      da513a6e4fad28414718acbd7c2389ee1e0951c9059cd043eedac365da6369c2

    • SHA512

      3664591b8b8d33ec26c903fa2f8eb2eeddd385c268a55637aee541330adbd500d70da0444768259881c58a44294e704dbe64f29c462c68083221d75722ec3a12

    • SSDEEP

      1536:PmRyOZtln6rP+T+V0h10Ly0QK2LYaIZTJ+7LhkiB0MPiKeEAgv:eFZ9t1Cy/YaMU7uihJ5v

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks