Overview

overview

8

Static

static

1

ﱞﱞﱞï...ﱞﱞ

windows10_x64

8

ﱞﱞﱞï...ฺฺ

windows10_x64

8

Resubmissions

11-05-2021 12:46

210511-sflmr9dlha 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    InjCht.zip

  • Size

    6.4MB

  • Sample

    210511-sflmr9dlha

  • MD5

    939a838bfff0ce2e0d50cfdf584d83a8

  • SHA1

    a820651cb12dbac84801f5b59f6ab33fe80cf1a0

  • SHA256

    9c7b891dda6734bf1240c86654731dad04d7c2be563fde9cd1b37136f430d9ac

  • SHA512

    05df019e79ee159fe821d04261d680c59d5ae79dee73e614f57cc336c3507d8e0bbcc615257d3ab1b0a4970d202dd0726f3f64da1aea7ed265f0a10eda1c98c7

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      InjCht.exe

    • Size

      6.4MB

    • MD5

      bd2068cfbffbe0eeb388f40ba17724d2

    • SHA1

      f8200558ef6bbf31474023d913642fed52b97e2f

    • SHA256

      0204588ca4e01c306d247a6dfc7ec1e3a29014e08d2ee0ce73d756ebbc429b6b

    • SHA512

      7a2e59c0bcd170636da3cc069cb6bb0fcf788dbe6d91ab48a70c10f7b0b950df737ecae1cc8d00cd6feb6f3d8a1c160dfe9ede6a73dfc8d47a9aa532bf46fae0

    Score
    8/10
    evasionpersistence

    • Creates new service(s)

      persistence

    • Executes dropped EXE

    • Stops running service(s)

      evasion

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

New Service

1
T1050

Modify Existing Service

1
T1031

Privilege Escalation

New Service

1
T1050

Defense Evasion

Impair Defenses

1
T1562

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Service Stop

1
T1489

Tasks