Overview

overview

10

Static

static

a5c873085f...in.exe

windows7_x64

10

a5c873085f...in.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4.bin

  • Size

    9KB

  • Sample

    210618-8ztgznhm72

  • MD5

    8bf00ef4dd6bb308c76849901b03ccbd

  • SHA1

    04e8a8d30869cf60ad42825667224d5cd01ade15

  • SHA256

    a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4

  • SHA512

    551365e55dbe599a156d1de1e59e388878e13d3a491efe963fda241ec58c1c38aaf2d46775c4e1d3c46760d081561f9ab5be9468974e4693a9b3c60a4478b454

Score
10/10
netfilterpersistencerootkit

Malware Config

Targets

    • Target

      a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4.bin

    • Size

      9KB

    • MD5

      8bf00ef4dd6bb308c76849901b03ccbd

    • SHA1

      04e8a8d30869cf60ad42825667224d5cd01ade15

    • SHA256

      a5c873085f36f69f29bb8895eb199d42ce86b16da62c56680917149b97e6dac4

    • SHA512

      551365e55dbe599a156d1de1e59e388878e13d3a491efe963fda241ec58c1c38aaf2d46775c4e1d3c46760d081561f9ab5be9468974e4693a9b3c60a4478b454

    Score
    10/10
    netfilterpersistencerootkit

    • NetFilter

      NetFilter is a rootkit first seen in June 2021.

      rootkitnetfilter

    • Downloads MZ/PE file

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks