Overview

overview

7

Static

static

3

archiveCH.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    archiveCH.exe

  • Size

    10.1MB

  • Sample

    210921-p9d5vaccaj

  • MD5

    7bb403307edfccdd9c0d69b527f9238a

  • SHA1

    6eab8586e7d09c422dd58c9e9982a79455ba2505

  • SHA256

    ffe043f31188d2160a5aae146ecdb512f60e1a4ce401f0e2bdf3ddbffbcb3762

  • SHA512

    4538a050d80a53394058497f5e62175f85fafee53202c3f8e5c459ed1671c1e68ee8d5651c6d13f587762a4a012951c1ee87f52114cc1bba624f0f16832e58ea

Score
7/10
microsoftphishingpyinstaller

Malware Config

Targets

    • Target

      archiveCH.exe

    • Size

      10.1MB

    • MD5

      7bb403307edfccdd9c0d69b527f9238a

    • SHA1

      6eab8586e7d09c422dd58c9e9982a79455ba2505

    • SHA256

      ffe043f31188d2160a5aae146ecdb512f60e1a4ce401f0e2bdf3ddbffbcb3762

    • SHA512

      4538a050d80a53394058497f5e62175f85fafee53202c3f8e5c459ed1671c1e68ee8d5651c6d13f587762a4a012951c1ee87f52114cc1bba624f0f16832e58ea

    Score
    7/10
    microsoftphishing

    • Loads dropped DLL

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks