Overview

overview

10

Static

static

3

e579eb17b3...d2.exe

windows7-x64

10

e579eb17b3...d2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e579eb17b3842f13894f2f25fd4946d069849c0a70eb1bcf6a23e7b4b6c5e7d2

  • Size

    96KB

  • Sample

    240701-egf4mayepr

  • MD5

    383f04d6fa272bea687cb8684ae2ea74

  • SHA1

    e4323207216a4d550aac3ce78e0c2534ecda4ba3

  • SHA256

    e579eb17b3842f13894f2f25fd4946d069849c0a70eb1bcf6a23e7b4b6c5e7d2

  • SHA512

    96dd2028ea7e26168913c013376170aa72380fb9663965131eb7c993ace29c2b94112ab2dfaa0807c44d807733a47364f28997c550c9f2bd5e7a0dccbb091926

  • SSDEEP

    1536:h40Nm7boWPSM4DTj63YxGNy7p05UPGzbCLduV9jojTIvjr:ijoWsTj63hCJGzbkd69jc0v

Score
10/10
persistence

Malware Config

Targets

    • Target

      e579eb17b3842f13894f2f25fd4946d069849c0a70eb1bcf6a23e7b4b6c5e7d2

    • Size

      96KB

    • MD5

      383f04d6fa272bea687cb8684ae2ea74

    • SHA1

      e4323207216a4d550aac3ce78e0c2534ecda4ba3

    • SHA256

      e579eb17b3842f13894f2f25fd4946d069849c0a70eb1bcf6a23e7b4b6c5e7d2

    • SHA512

      96dd2028ea7e26168913c013376170aa72380fb9663965131eb7c993ace29c2b94112ab2dfaa0807c44d807733a47364f28997c550c9f2bd5e7a0dccbb091926

    • SSDEEP

      1536:h40Nm7boWPSM4DTj63YxGNy7p05UPGzbCLduV9jojTIvjr:ijoWsTj63hCJGzbkd69jc0v

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks