Overview

overview

10

Static

static

9804787b31...in.exe

windows7_x64

10

9804787b31...in.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89.bin

  • Size

    564KB

  • Sample

    210618-g7t7z2fb76

  • MD5

    145e3c224e4ecaf26d4638efb9d622a7

  • SHA1

    70d5b0be6ed51e43c0a19b773cead8793257bbc1

  • SHA256

    9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89

  • SHA512

    f6a45167238bff44410c528fdeaf417cb6fd5a563bb61fb6febd76a26f427657f4f93175cac25a09784029818190645fb9d40f7ce781329a2eda7ae669f3d822

Score
10/10
netfilterpersistencerootkit

Malware Config

Targets

    • Target

      9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89.bin

    • Size

      564KB

    • MD5

      145e3c224e4ecaf26d4638efb9d622a7

    • SHA1

      70d5b0be6ed51e43c0a19b773cead8793257bbc1

    • SHA256

      9804787b31e0025dd2ae9344ca1beae2e701cdf8fd77a60f424295dc9280dc89

    • SHA512

      f6a45167238bff44410c528fdeaf417cb6fd5a563bb61fb6febd76a26f427657f4f93175cac25a09784029818190645fb9d40f7ce781329a2eda7ae669f3d822

    Score
    10/10
    netfilterpersistencerootkit

    • NetFilter

      NetFilter is a rootkit first seen in June 2021.

      rootkitnetfilter

    • Downloads MZ/PE file

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks