Overview

overview

8

Static

static

8

ae4cc675f5...e2.exe

windows7_x64

6

ae4cc675f5...e2.exe

windows10_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae4cc675f5090aa1c90f406f508b71c960c3541a5fe8a01be3b1d3547c7c9ae2

  • Size

    50KB

  • Sample

    201108-hblpy8cvze

  • MD5

    745ded2f0c2c9b07ca67542af6bdd031

  • SHA1

    43b9140d519c05bf0ff413d0bba1a90a03a132e2

  • SHA256

    ae4cc675f5090aa1c90f406f508b71c960c3541a5fe8a01be3b1d3547c7c9ae2

  • SHA512

    f628aa8bc831e46291d7b76ae59ebd650fff694ecb0254ebd7a05452bbf2f32d5552775c981563f2de28396f341a5aac3cc73a5701a55f7ad8a849926b38df20

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      ae4cc675f5090aa1c90f406f508b71c960c3541a5fe8a01be3b1d3547c7c9ae2

    • Size

      50KB

    • MD5

      745ded2f0c2c9b07ca67542af6bdd031

    • SHA1

      43b9140d519c05bf0ff413d0bba1a90a03a132e2

    • SHA256

      ae4cc675f5090aa1c90f406f508b71c960c3541a5fe8a01be3b1d3547c7c9ae2

    • SHA512

      f628aa8bc831e46291d7b76ae59ebd650fff694ecb0254ebd7a05452bbf2f32d5552775c981563f2de28396f341a5aac3cc73a5701a55f7ad8a849926b38df20

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Modifies service

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks