Overview

overview

8

Static

static

8

e4ac0728da...bf.exe

windows7_x64

7

e4ac0728da...bf.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4ac0728da98afb0547cad042a0ae73a202cfe7e2877dc57b84053e4f7603fbf

  • Size

    3.2MB

  • Sample

    210513-896df7ancs

  • MD5

    a3caa75210ab96a021512552587e8370

  • SHA1

    5ee6e59dba738cae31c8c933c65fe297c8dce37c

  • SHA256

    e4ac0728da98afb0547cad042a0ae73a202cfe7e2877dc57b84053e4f7603fbf

  • SHA512

    50c14483e443cf0655556c82184016623485a9b61304e366e3dce080d7ed9b4ca710b100fd40149118e851a8d6c8f64a06964c2322bbc482814a6db07277c42d

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      e4ac0728da98afb0547cad042a0ae73a202cfe7e2877dc57b84053e4f7603fbf

    • Size

      3.2MB

    • MD5

      a3caa75210ab96a021512552587e8370

    • SHA1

      5ee6e59dba738cae31c8c933c65fe297c8dce37c

    • SHA256

      e4ac0728da98afb0547cad042a0ae73a202cfe7e2877dc57b84053e4f7603fbf

    • SHA512

      50c14483e443cf0655556c82184016623485a9b61304e366e3dce080d7ed9b4ca710b100fd40149118e851a8d6c8f64a06964c2322bbc482814a6db07277c42d

    Score
    7/10
    persistence

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks