ratty | b6079b972c7bfe1b631b7e4776ce306b3cd818e479ca5cf1b53ca4345b4fd854 | Triage

Submit
Reports

Overview

overview

Static

static

SecuriteIn...79.msi

windows7_x64

7

SecuriteIn...79.msi

windows10_x64

7

Sharing

General

Target

SecuriteInfo.com.Exploit.AppendedJar.1.Gen.26250.6479
Size

865KB
Sample

210117-gd1zqtlxxx
MD5

7ff3f6584da9ee99654776ae853fa158
SHA1

a40ec7f8788c7ffbb7ad1bc50454b73edd95393c
SHA256

b6079b972c7bfe1b631b7e4776ce306b3cd818e479ca5cf1b53ca4345b4fd854
SHA512

50cb16e7242c0227e90afc934baac2b375584c9f8d666300184d6c7ce628bab6037d83ec28268cb3410ae8b01d273875ee31661b2ec462d51acc08601eb81a73

Score

10^/10

ratty

Static task

static1

Behavioral task

behavioral1

Sample

SecuriteInfo.com.Exploit.AppendedJar.1.Gen.26250.6479.msi

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

SecuriteInfo.com.Exploit.AppendedJar.1.Gen.26250.6479.msi

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  SecuriteInfo.com.Exploit.AppendedJar.1.Gen.26250.6479
- Size
  
  865KB
- MD5
  
  7ff3f6584da9ee99654776ae853fa158
- SHA1
  
  a40ec7f8788c7ffbb7ad1bc50454b73edd95393c
- SHA256
  
  b6079b972c7bfe1b631b7e4776ce306b3cd818e479ca5cf1b53ca4345b4fd854
- SHA512
  
  50cb16e7242c0227e90afc934baac2b375584c9f8d666300184d6c7ce628bab6037d83ec28268cb3410ae8b01d273875ee31661b2ec462d51acc08601eb81a73
Score

7^/10
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy