Overview

overview

8

Static

static

kFZL7Q3b.exe

windows7_x64

8

kFZL7Q3b.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    kFZL7Q3b.exe

  • Size

    29KB

  • Sample

    210421-s3rgr5cwlx

  • MD5

    05a677cf02b11ca26d30e538dc56001f

  • SHA1

    b82536b603be4f7a9a0231db925129c9efbc777b

  • SHA256

    a121587e76f7ab2c542262abbb0904500e9924a44fd2fa89cc9406f9e385ac3e

  • SHA512

    408d5697ffe5c567d06faf28a0f85419696dc2e23eb528f92464192c234cadb5c3fcd867c8107defe3f5da90e0eee76634b175ce2c1f6b54e5a43cc62017826f

Score
8/10
evasion

Malware Config

Targets

    • Target

      kFZL7Q3b.exe

    • Size

      29KB

    • MD5

      05a677cf02b11ca26d30e538dc56001f

    • SHA1

      b82536b603be4f7a9a0231db925129c9efbc777b

    • SHA256

      a121587e76f7ab2c542262abbb0904500e9924a44fd2fa89cc9406f9e385ac3e

    • SHA512

      408d5697ffe5c567d06faf28a0f85419696dc2e23eb528f92464192c234cadb5c3fcd867c8107defe3f5da90e0eee76634b175ce2c1f6b54e5a43cc62017826f

    Score
    8/10
    evasion

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks