Overview

overview

8

Static

static

a75b6323ea...38.exe

windows7_x64

8

a75b6323ea...38.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a75b6323eafaa367601161eb605f152eaea5b4549131d8459cf90eabfb15cf38

  • Size

    3.7MB

  • Sample

    201108-am39dnkm9e

  • MD5

    36a583e96036f4e36db3b8482bfd8ca6

  • SHA1

    6fd69e1f59fe12d95c4918063bbd0cf5223b20b8

  • SHA256

    a75b6323eafaa367601161eb605f152eaea5b4549131d8459cf90eabfb15cf38

  • SHA512

    9422e99380ccbd0ac365d7a31fa5ce18e8b4e8d31b2ee64881ee90a166db9e156a738a79e290de6ab5522b8e358dfcd551564476e33d3127b95bd7db95f3e0af

Score
8/10
discovery

Malware Config

Targets

    • Target

      a75b6323eafaa367601161eb605f152eaea5b4549131d8459cf90eabfb15cf38

    • Size

      3.7MB

    • MD5

      36a583e96036f4e36db3b8482bfd8ca6

    • SHA1

      6fd69e1f59fe12d95c4918063bbd0cf5223b20b8

    • SHA256

      a75b6323eafaa367601161eb605f152eaea5b4549131d8459cf90eabfb15cf38

    • SHA512

      9422e99380ccbd0ac365d7a31fa5ce18e8b4e8d31b2ee64881ee90a166db9e156a738a79e290de6ab5522b8e358dfcd551564476e33d3127b95bd7db95f3e0af

    Score
    8/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • JavaScript code in executable

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Security Software Discovery

1
T1063

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks