Overview

overview

8

Static

static

35ff457Rk....in.exe

windows7_x64

8

35ff457Rk....in.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35ff457Rk.bin.exe.bin

  • Size

    304KB

  • Sample

    210611-ma5cvykx4x

  • MD5

    5ecae137bf33ecbb981f3b637b06efc5

  • SHA1

    371e01949b1c7316164021e38d624ffbcba3090a

  • SHA256

    4f6db0454c9afe37d358d1399fe8932bec799eb257df11eccc6ab87358c4efb3

  • SHA512

    753a63b1407b21cec5e50bd5ad7158917926c6502ac43ffb61e99a911371798bb05be2845598640ac018dd7d57ccddf3c1f7736d22d0b2c2edde2eb7188d0331

Score
8/10

Malware Config

Targets

    • Target

      35ff457Rk.bin.exe.bin

    • Size

      304KB

    • MD5

      5ecae137bf33ecbb981f3b637b06efc5

    • SHA1

      371e01949b1c7316164021e38d624ffbcba3090a

    • SHA256

      4f6db0454c9afe37d358d1399fe8932bec799eb257df11eccc6ab87358c4efb3

    • SHA512

      753a63b1407b21cec5e50bd5ad7158917926c6502ac43ffb61e99a911371798bb05be2845598640ac018dd7d57ccddf3c1f7736d22d0b2c2edde2eb7188d0331

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks