Overview

overview

8

Static

static

Shipmet_Do...df.exe

windows7_x64

8

Shipmet_Do...df.exe

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Shipmet_Documents_DHL_AWB #7849402748,pdf.exe

  • Size

    4.6MB

  • Sample

    200713-phb6g2tvsx

  • MD5

    7130e2694cca996709191b76808eef93

  • SHA1

    b1365ba832f6c4d6e03fc82404b966a8fa851145

  • SHA256

    4feb056769f2ac7fb07a65bfd3d5ca0fc22e8f3b3cf046fc586c782935ca2445

  • SHA512

    a2ce34dcb242d7925e610c88ad7faf8ff4396044c5da4f798bcde88e61f3643e9aff97da91a2b5a939c5007b0774517058729be17dadd45a27c6fa34a68ae024

Score
8/10
persistence

Malware Config

Targets

    • Target

      Shipmet_Documents_DHL_AWB #7849402748,pdf.exe

    • Size

      4.6MB

    • MD5

      7130e2694cca996709191b76808eef93

    • SHA1

      b1365ba832f6c4d6e03fc82404b966a8fa851145

    • SHA256

      4feb056769f2ac7fb07a65bfd3d5ca0fc22e8f3b3cf046fc586c782935ca2445

    • SHA512

      a2ce34dcb242d7925e610c88ad7faf8ff4396044c5da4f798bcde88e61f3643e9aff97da91a2b5a939c5007b0774517058729be17dadd45a27c6fa34a68ae024

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run entry to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks