Overview

overview

10

Static

static

80099d0162...d1.exe

windows7_x64

10

80099d0162...d1.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80099d016219e9682b1e217586f5cad1.exe

  • Size

    735KB

  • Sample

    210713-42v32k3b52

  • MD5

    80099d016219e9682b1e217586f5cad1

  • SHA1

    1628b91051a35e7cb70fe58e2b6e9ac135e1815c

  • SHA256

    d7f2fddb43eb63f9246f0a4535dfcca6da2817592455d7eceaacde666cf1aaae

  • SHA512

    82faf680912e72f2e1b25288be9f13f1722be79f5cf4c04c46342f02a85afb2e76f1bec8f4beb729d96c802fe8b0b205ac4f133331eafccc07a4a91a18edb649

Score
10/10
xpertratbxkevasionpersistencerattrojan

Malware Config

Extracted

Family

xpertrat

Version

3.1.9

Botnet

BXK

C2

ioxg.ix.tc:4000

Mutex

R4W8O5A3-P0G7-Q7U5-H114-L7S6L4U0I6I6

Targets

    • Target

      80099d016219e9682b1e217586f5cad1.exe

    • Size

      735KB

    • MD5

      80099d016219e9682b1e217586f5cad1

    • SHA1

      1628b91051a35e7cb70fe58e2b6e9ac135e1815c

    • SHA256

      d7f2fddb43eb63f9246f0a4535dfcca6da2817592455d7eceaacde666cf1aaae

    • SHA512

      82faf680912e72f2e1b25288be9f13f1722be79f5cf4c04c46342f02a85afb2e76f1bec8f4beb729d96c802fe8b0b205ac4f133331eafccc07a4a91a18edb649

    Score
    10/10
    xpertratbxkevasionpersistencerattrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Bypass User Account Control

1
T1088

Disabling Security Tools

3
T1089

Modify Registry

6
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks