Overview

overview

10

Static

static

3

e83ce430bc...82.exe

windows7-x64

10

e83ce430bc...82.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e83ce430bc4115f88f3a22c97c322f95311ab4b6a3a0d7e7d863a2fc6919b582

  • Size

    59KB

  • Sample

    240701-emxcssygkl

  • MD5

    56721e8e97c100e6186d0adabd44ae05

  • SHA1

    48e4c3450f2f3ee0c029f0cb7d066e0896bb5bd7

  • SHA256

    e83ce430bc4115f88f3a22c97c322f95311ab4b6a3a0d7e7d863a2fc6919b582

  • SHA512

    ebc05bc202e6e70938b5ef5cc929aa2a2ee1a0ee807d0f0457b5d165cb0eb30c192d45d867401f0228298b8a56394c8dbff1c68b585b3d95252f6a6ddd556cce

  • SSDEEP

    768:Jm+tZ3wD0W26/FTg4oPo0JcwGla+apSPvyr23+Lb39WM8tLPWiG2p/1H51Xdnhfy:ZAIW22h4PotwGlAMPw2utQtDE2LRO

Score
10/10
persistence

Malware Config

Targets

    • Target

      e83ce430bc4115f88f3a22c97c322f95311ab4b6a3a0d7e7d863a2fc6919b582

    • Size

      59KB

    • MD5

      56721e8e97c100e6186d0adabd44ae05

    • SHA1

      48e4c3450f2f3ee0c029f0cb7d066e0896bb5bd7

    • SHA256

      e83ce430bc4115f88f3a22c97c322f95311ab4b6a3a0d7e7d863a2fc6919b582

    • SHA512

      ebc05bc202e6e70938b5ef5cc929aa2a2ee1a0ee807d0f0457b5d165cb0eb30c192d45d867401f0228298b8a56394c8dbff1c68b585b3d95252f6a6ddd556cce

    • SSDEEP

      768:Jm+tZ3wD0W26/FTg4oPo0JcwGla+apSPvyr23+Lb39WM8tLPWiG2p/1H51Xdnhfy:ZAIW22h4PotwGlAMPw2utQtDE2LRO

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks