Overview

overview

8

Static

static

6

Internet-Win7-30min

windows7_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Query_Ref_CSQ5329906_pdf.hta

  • Size

    1.3MB

  • Sample

    201120-tmepe3dlcx

  • MD5

    553b0bae700b8e1f563fc338ad3246e1

  • SHA1

    8b77b7643e43aa66a92508f14331648ddf29610c

  • SHA256

    0356d7f65407b958a06441d53a33e7424b51c3d82d539b14fbd7e6acadec1f1c

  • SHA512

    1ef2473e4522877a9be28ede38dd32e52ef2a6e6dae7a60b875ab87d13b78989c8c4f8b85d727b5649dff3667362782773e2c82d1f8d28799893be6be8fb37f9

Score
8/10

Malware Config

Targets

    • Target

      Query_Ref_CSQ5329906_pdf.hta

    • Size

      1.3MB

    • MD5

      553b0bae700b8e1f563fc338ad3246e1

    • SHA1

      8b77b7643e43aa66a92508f14331648ddf29610c

    • SHA256

      0356d7f65407b958a06441d53a33e7424b51c3d82d539b14fbd7e6acadec1f1c

    • SHA512

      1ef2473e4522877a9be28ede38dd32e52ef2a6e6dae7a60b875ab87d13b78989c8c4f8b85d727b5649dff3667362782773e2c82d1f8d28799893be6be8fb37f9

    Score
    8/10

    • Blacklisted process makes network request

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks