Overview

overview

10

Static

static

3

ef45ff130b...0f.exe

windows7-x64

10

ef45ff130b...0f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef45ff130b44afd2ed43d5a74fec5ebde21739277b8851b1d12854f9def6ac0f

  • Size

    94KB

  • Sample

    240701-e17exsweja

  • MD5

    b4b91ba83d2df0ae8dc6ff15a666e1b8

  • SHA1

    60e9aa429d3dc3f7b9aa3f933c536eda9d24fa94

  • SHA256

    ef45ff130b44afd2ed43d5a74fec5ebde21739277b8851b1d12854f9def6ac0f

  • SHA512

    45a82e1b50ea62397f91bb1344879e038d36a2cc3faae29e4bab61c103e162e28c1e75d4c44c95ae4003cb7a0df0a49cc08721a83a2d8a81347546707bda96e2

  • SSDEEP

    1536:KF4nlwlugnjWCaNYJPOWuB/fx+ASld6O2Lw2aIZTJ+7LhkiB0MPiKeEAgv:BnTfCwYJPOLHwASlYfaMU7uihJ5v

Score
10/10
persistence

Malware Config

Targets

    • Target

      ef45ff130b44afd2ed43d5a74fec5ebde21739277b8851b1d12854f9def6ac0f

    • Size

      94KB

    • MD5

      b4b91ba83d2df0ae8dc6ff15a666e1b8

    • SHA1

      60e9aa429d3dc3f7b9aa3f933c536eda9d24fa94

    • SHA256

      ef45ff130b44afd2ed43d5a74fec5ebde21739277b8851b1d12854f9def6ac0f

    • SHA512

      45a82e1b50ea62397f91bb1344879e038d36a2cc3faae29e4bab61c103e162e28c1e75d4c44c95ae4003cb7a0df0a49cc08721a83a2d8a81347546707bda96e2

    • SSDEEP

      1536:KF4nlwlugnjWCaNYJPOWuB/fx+ASld6O2Lw2aIZTJ+7LhkiB0MPiKeEAgv:BnTfCwYJPOLHwASlYfaMU7uihJ5v

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks