Overview

overview

6

Static

static

SecuriteIn...80.xls

windows7_x64

6

SecuriteIn...80.xls

windows10_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan.GenericKD.34139809.20191.20380

  • Size

    911KB

  • Sample

    200709-9ry395mkbx

  • MD5

    5d3da35b75a8ebd4ea01e5dfea3cc964

  • SHA1

    a96ad70d56e1fb611b6ecc29029b813b9d3948ff

  • SHA256

    0e7dcaa2a0b1d03753b49f7fd799a82c9c0ee20b6d1b02496151f53e234ddd91

  • SHA512

    6d887b61524f8ceec84268623b9187b98c1ce6ec96ab3650bab587253b3e71e77480e3e39e75e7beb106c847c8ae98e0257613e220d62dfbde0ff9ee62e55c3c

Score
6/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.GenericKD.34139809.20191.20380

    • Size

      911KB

    • MD5

      5d3da35b75a8ebd4ea01e5dfea3cc964

    • SHA1

      a96ad70d56e1fb611b6ecc29029b813b9d3948ff

    • SHA256

      0e7dcaa2a0b1d03753b49f7fd799a82c9c0ee20b6d1b02496151f53e234ddd91

    • SHA512

      6d887b61524f8ceec84268623b9187b98c1ce6ec96ab3650bab587253b3e71e77480e3e39e75e7beb106c847c8ae98e0257613e220d62dfbde0ff9ee62e55c3c

    Score
    6/10

    • Enumerates connected drives

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks