Overview

overview

10

task1

 

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1739b4acad78982bdb519428e1a8403839c56270b982e4f4a3672b9a2a1341d

  • Size

    176KB

  • Sample

    191212-sbf43tgvm2

  • MD5

    35a9a780a90652bb6428d22a67fcf292

  • SHA1

    55677f0431710ede0e9d8f67b22a750481cfe8eb

  • SHA256

    c1739b4acad78982bdb519428e1a8403839c56270b982e4f4a3672b9a2a1341d

  • SHA512

    d75112aec3558125f3c75d0d4c58e2d410127ffd20144a2d80cde0c8d7c2aff74b91eb3b06ba3e5cb9300d300d23b39efc879a3e75857aba72b7535079c6e7ff

Score
10/10
discovery

Malware Config

Targets

    • Target

      c1739b4acad78982bdb519428e1a8403839c56270b982e4f4a3672b9a2a1341d

    • Size

      176KB

    • MD5

      35a9a780a90652bb6428d22a67fcf292

    • SHA1

      55677f0431710ede0e9d8f67b22a750481cfe8eb

    • SHA256

      c1739b4acad78982bdb519428e1a8403839c56270b982e4f4a3672b9a2a1341d

    • SHA512

      d75112aec3558125f3c75d0d4c58e2d410127ffd20144a2d80cde0c8d7c2aff74b91eb3b06ba3e5cb9300d300d23b39efc879a3e75857aba72b7535079c6e7ff

    Score
    10/10
    discovery

    • Process spawned unexpected child process

    • Checks for installed software on the system

      discovery

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    task1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

4
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks