Overview

overview

8

Static

static

1a6014d537...b5.exe

windows7_x64

8

1a6014d537...b5.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a6014d5372cb9cc90f6fcd84e85a0b5.exe

  • Size

    1.3MB

  • Sample

    200713-2q3dkk7mks

  • MD5

    1a6014d5372cb9cc90f6fcd84e85a0b5

  • SHA1

    d12df5828471f094c7a268c9564ddc7ea19a4540

  • SHA256

    419fdd95959d3b4a086ad9009775e08bde4867593bffc22e05e19d89606698f4

  • SHA512

    e2afb15977c7f43ba0b82509a3651b9d085ed11bcc0c8113527b001f5df78a1dad0384e157f132e57ce4975da357c08234eb135dbfd7aa2f043935a7a4bf9af0

Score
8/10
persistence

Malware Config

Targets

    • Target

      1a6014d5372cb9cc90f6fcd84e85a0b5.exe

    • Size

      1.3MB

    • MD5

      1a6014d5372cb9cc90f6fcd84e85a0b5

    • SHA1

      d12df5828471f094c7a268c9564ddc7ea19a4540

    • SHA256

      419fdd95959d3b4a086ad9009775e08bde4867593bffc22e05e19d89606698f4

    • SHA512

      e2afb15977c7f43ba0b82509a3651b9d085ed11bcc0c8113527b001f5df78a1dad0384e157f132e57ce4975da357c08234eb135dbfd7aa2f043935a7a4bf9af0

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Adds Run entry to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks