Overview

overview

8

Static

static

e533bf0348...8d.exe

windows7_x64

8

e533bf0348...8d.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e533bf0348f9a5c018fc4eaea2b4138d.exe

  • Size

    440KB

  • Sample

    210422-7l1jvx7wm2

  • MD5

    e533bf0348f9a5c018fc4eaea2b4138d

  • SHA1

    17d0fd9f96bf5759997197237deedbd37cad3c15

  • SHA256

    a7d4ad5e6eedf5be0ad6f9ffc704827b7c1e9aeb12d440c847031af8d4d1f7b1

  • SHA512

    a5483525cc05208cf506b4af2313e49c16896c33903210a9d3975b78e00af825bfe6d73e57ca69aeb300d2bd2a1d47ce3ee6394c4eaf422b7aaa5ff97a0fbef3

Score
8/10
persistence

Malware Config

Targets

    • Target

      e533bf0348f9a5c018fc4eaea2b4138d.exe

    • Size

      440KB

    • MD5

      e533bf0348f9a5c018fc4eaea2b4138d

    • SHA1

      17d0fd9f96bf5759997197237deedbd37cad3c15

    • SHA256

      a7d4ad5e6eedf5be0ad6f9ffc704827b7c1e9aeb12d440c847031af8d4d1f7b1

    • SHA512

      a5483525cc05208cf506b4af2313e49c16896c33903210a9d3975b78e00af825bfe6d73e57ca69aeb300d2bd2a1d47ce3ee6394c4eaf422b7aaa5ff97a0fbef3

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks