Overview

overview

8

Static

static

??????????...om.exe

windows7_x64

8

??????????...om.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    开发中的战斗机话术！认真观看，自然就懂其中的奥妙之处了.7z

  • Size

    288KB

  • Sample

    210620-138x4rrc62

  • MD5

    e3147b9b45dfe1230c585125aabd2f93

  • SHA1

    7b677cde5fcb43c9756f48c579b0e67aa4b2c8fd

  • SHA256

    f3b96f1731613a1d8e5afa14767f1f96ff4debe9fdc8a9dab6305bbb3162bf7f

  • SHA512

    36117a0d640e8d9f87cd30a2b2a049fb1eaddb8ed1672162c3d06fa3187386dfafd326dfaeafbeed3244e8000eb7ebc795434fd46b1e6b8fda1337d7170f4bb3

Score
8/10

Malware Config

Targets

    • Target

      ???????????????????????????.com

    • Size

      1.3MB

    • MD5

      38f4f7abbcc1860e23c23a6918f44cda

    • SHA1

      f3d3429fd5add2509ce5af0b42d24b01e1e161ee

    • SHA256

      f1412515481a806ff3350065c8fc0c4c667b1545738deadbf5a1e18291147e48

    • SHA512

      1b1a5c990a2eddfa0ad07d25cafd1144114ed5a78994da202cc29e018c50759f14638d970c7e82e95a8e2093c46161f3af034c4368847cd9ab697308bf35c758

    Score
    8/10

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks