Overview

overview

8

Static

static

codes.zip (1).exe

windows7_x64

8

codes.zip (1).exe

windows10_x64

8

Resubmissions

11-07-2021 12:14

210711-7n9zdpw47j 8

11-07-2021 12:14

210711-4d39x9vggj 8

11-07-2021 12:14

210711-lk364nq1vn 10

11-07-2021 11:45

210711-zaglhjen4n 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    codes.zip (1).exe

  • Size

    3.0MB

  • Sample

    210711-7n9zdpw47j

  • MD5

    d857ed44ef2cf4d3e9676ecc68c149c9

  • SHA1

    90e49995309e8d20ab9596b1b8e6d80a90a5984b

  • SHA256

    d648e8e94c0674e6b1bd537936a33a39c33d3429d34fb70b97ff7f60904c9c84

  • SHA512

    7c9a7358e77c09b6ea463e9a77622c47ea245aa85c44b4190f0c55155a9b65ce42c9316f952fc72538725729b92c1ae725f06bba6df2c466eb66519fb2acdff5

Score
8/10
discovery

Malware Config

Targets

    • Target

      codes.zip (1).exe

    • Size

      3.0MB

    • MD5

      d857ed44ef2cf4d3e9676ecc68c149c9

    • SHA1

      90e49995309e8d20ab9596b1b8e6d80a90a5984b

    • SHA256

      d648e8e94c0674e6b1bd537936a33a39c33d3429d34fb70b97ff7f60904c9c84

    • SHA512

      7c9a7358e77c09b6ea463e9a77622c47ea245aa85c44b4190f0c55155a9b65ce42c9316f952fc72538725729b92c1ae725f06bba6df2c466eb66519fb2acdff5

    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Security Software Discovery

1
T1063

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks