Overview

overview

10

Static

static

Pedido de ...sc.exe

windows7_x64

10

Pedido de ...sc.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Pedido de pedido Novo projeto maio 2021PDF.sc.exe

  • Size

    909KB

  • Sample

    210506-9lq3zmrzzn

  • MD5

    279b01ec826eec272cdf1bc78cc78141

  • SHA1

    c56086a017b7156ecbe2d7d1edc0defe74378bb5

  • SHA256

    a99a40d67018df27d1c4a0aad6b77a5985ab161480459060d5485976e70aae85

  • SHA512

    3e1e4630924a5d12db4373cab980dddfe5aa4e7cc194427191b3d2a7359c7648adc39b18236e37be350a9779930942636dd2917ff41f59f27002e5aa0a434a04

Score
10/10
bitratmodiloaderpersistencetrojanupx

Malware Config

Targets

    • Target

      Pedido de pedido Novo projeto maio 2021PDF.sc.exe

    • Size

      909KB

    • MD5

      279b01ec826eec272cdf1bc78cc78141

    • SHA1

      c56086a017b7156ecbe2d7d1edc0defe74378bb5

    • SHA256

      a99a40d67018df27d1c4a0aad6b77a5985ab161480459060d5485976e70aae85

    • SHA512

      3e1e4630924a5d12db4373cab980dddfe5aa4e7cc194427191b3d2a7359c7648adc39b18236e37be350a9779930942636dd2917ff41f59f27002e5aa0a434a04

    Score
    10/10
    bitratmodiloaderpersistencetrojanupx

    • BitRAT

      BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

      trojanbitrat

    • BitRAT Payload

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks