bb71dd1c92f7a40339184d27f53708c7c7e6f73a12bf41f462248a2f24588959 | Triage

Submit
Reports

Overview

overview

Static

static

Enced.exe

windows7_x64

7

Enced.exe

windows10_x64

Resubmissions

24/05/2020, 06:24 UTC

200524-arhqf6gx92 10

Sharing

General

Target

Enced.exe
Size

61KB
Sample

200524-arhqf6gx92
MD5

56eaa612cc10404d14aeb013dc66a279
SHA1

9832299df389f4ebf2b442c049b5a3c7317f3263
SHA256

bb71dd1c92f7a40339184d27f53708c7c7e6f73a12bf41f462248a2f24588959
SHA512

5faf5bbbca1578d65ad5067f5345bc5eedaf1ca97fce0502a8a9baa7f64d864f382cffde603e386d7a7f2ed1201f13b915b6fe9ff80909c8acca13fc1d58d7cc

Score

10^/10

Static task

static1

Behavioral task

behavioral1

Sample

Enced.exe

Resource

win7v200430

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

Enced.exe

Resource

win10v200430

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  Enced.exe
- Size
  
  61KB
- MD5
  
  56eaa612cc10404d14aeb013dc66a279
- SHA1
  
  9832299df389f4ebf2b442c049b5a3c7317f3263
- SHA256
  
  bb71dd1c92f7a40339184d27f53708c7c7e6f73a12bf41f462248a2f24588959
- SHA512
  
  5faf5bbbca1578d65ad5067f5345bc5eedaf1ca97fce0502a8a9baa7f64d864f382cffde603e386d7a7f2ed1201f13b915b6fe9ff80909c8acca13fc1d58d7cc
Score

10^/10
- Suspicious use of NtCreateProcessExOtherParentProcess
- Deletes itself
- Program crash
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.