Overview

overview

10

Static

static

installer.exe

windows7_x64

10

installer.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    installer.exe

  • Size

    3.3MB

  • Sample

    210826-ng2kt6de2x

  • MD5

    41544830599f851295a3218fc7f7d2bd

  • SHA1

    d5fed6d46853a0583cd43646554bacb1448a69da

  • SHA256

    a6ccf359f2965a13d8c3e07ada2a62a9d32be58b8e72d99ada2e80b3ec052df7

  • SHA512

    18fcc9c1bbb19b4e3c8089c2d530ec975582aacc8ca24257af1672d2a1e36ec760d63f5903380ca7e1ed9d45a28f471a5dbc2056d16b03f97e65a904947954f0

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      installer.exe

    • Size

      3.3MB

    • MD5

      41544830599f851295a3218fc7f7d2bd

    • SHA1

      d5fed6d46853a0583cd43646554bacb1448a69da

    • SHA256

      a6ccf359f2965a13d8c3e07ada2a62a9d32be58b8e72d99ada2e80b3ec052df7

    • SHA512

      18fcc9c1bbb19b4e3c8089c2d530ec975582aacc8ca24257af1672d2a1e36ec760d63f5903380ca7e1ed9d45a28f471a5dbc2056d16b03f97e65a904947954f0

    Score
    10/10
    discoverypersistence

    • Registers COM server for autorun

      persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks