Overview

overview

8

Static

static

698d49245a...87.exe

windows7_x64

8

698d49245a...87.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    698d49245a200364157220696c81de87.exe

  • Size

    413KB

  • Sample

    210422-lfe77h1ac2

  • MD5

    698d49245a200364157220696c81de87

  • SHA1

    75798c020a7e02d49b8140c29541242e2fbfd6f8

  • SHA256

    048b796fb78b1a11d598189410f4de21f57094d283fbebaec36fc604b1f66197

  • SHA512

    07c472955f92fc333e15213177e335c37c6b377e6515e7d2201c6a52fa14034b26ce37217b4768ae872bd230d83295a3add9d46e75de5f01f016339029a1d98a

Score
8/10
persistence

Malware Config

Targets

    • Target

      698d49245a200364157220696c81de87.exe

    • Size

      413KB

    • MD5

      698d49245a200364157220696c81de87

    • SHA1

      75798c020a7e02d49b8140c29541242e2fbfd6f8

    • SHA256

      048b796fb78b1a11d598189410f4de21f57094d283fbebaec36fc604b1f66197

    • SHA512

      07c472955f92fc333e15213177e335c37c6b377e6515e7d2201c6a52fa14034b26ce37217b4768ae872bd230d83295a3add9d46e75de5f01f016339029a1d98a

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks