Overview

overview

10

Static

static

3

e9da137b14...32.exe

windows7-x64

10

e9da137b14...32.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9da137b1491027558febe568786b01fec90e795f6ff21fb38949ad673372f32

  • Size

    93KB

  • Sample

    240701-ermzxsyhjq

  • MD5

    742aedebe6cb4652ef5b307dd2ce6d1b

  • SHA1

    0236b8e944302ed23d7a26d898ad6289609f9292

  • SHA256

    e9da137b1491027558febe568786b01fec90e795f6ff21fb38949ad673372f32

  • SHA512

    9e35d92ad4d573e1fff2a0dc3d014ed7b18b67165723a5bb0a4e2812c2570fc72e9fdeec53a1b97f94d239c072975dea7dd27e469044dd771833a4faa29ec5a6

  • SSDEEP

    1536:266d6d7G6i0zLbzlDWVTz3LOMiiHiiBiiHiiHii1ii1ii1iiFOiiiiiiiiiiqTim:2LaiF0XXlozSCeRSJdEN0s4WE+3

Score
10/10
persistence

Malware Config

Targets

    • Target

      e9da137b1491027558febe568786b01fec90e795f6ff21fb38949ad673372f32

    • Size

      93KB

    • MD5

      742aedebe6cb4652ef5b307dd2ce6d1b

    • SHA1

      0236b8e944302ed23d7a26d898ad6289609f9292

    • SHA256

      e9da137b1491027558febe568786b01fec90e795f6ff21fb38949ad673372f32

    • SHA512

      9e35d92ad4d573e1fff2a0dc3d014ed7b18b67165723a5bb0a4e2812c2570fc72e9fdeec53a1b97f94d239c072975dea7dd27e469044dd771833a4faa29ec5a6

    • SSDEEP

      1536:266d6d7G6i0zLbzlDWVTz3LOMiiHiiBiiHiiHii1ii1ii1iiFOiiiiiiiiiiqTim:2LaiF0XXlozSCeRSJdEN0s4WE+3

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks