Overview

overview

10

Static

static

2cb032be3f...88.exe

windows7_x64

3

2cb032be3f...88.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cb032be3ffbf1a86e75669f6ff3e088.exe

  • Size

    12KB

  • Sample

    211004-mdny3agbc3

  • MD5

    2cb032be3ffbf1a86e75669f6ff3e088

  • SHA1

    bd801dff881983fad20212b5ee5cb7cc65845bf5

  • SHA256

    5bdc764598795f4afcb70f6ff95f29114f61ea24a1d836838125c08268e13de9

  • SHA512

    1d0cae94138772ffb87823012e88631ae531720aa0225e30cf298ed0b2326c17c41c64edd9002026eef552a91664edcfcce69b0d3480e44e21b95e7fc7158726

Score
10/10
xpertrattestevasionpersistencerattrojan

Malware Config

Extracted

Family

xpertrat

Version

3.0.10

Botnet

Test

C2

kapasky-antivirus.firewall-gateway.net:4000

Mutex

L3Q7J4T2-J8A6-L6O4-W4G3-U5J7D0W2W5F0

Targets

    • Target

      2cb032be3ffbf1a86e75669f6ff3e088.exe

    • Size

      12KB

    • MD5

      2cb032be3ffbf1a86e75669f6ff3e088

    • SHA1

      bd801dff881983fad20212b5ee5cb7cc65845bf5

    • SHA256

      5bdc764598795f4afcb70f6ff95f29114f61ea24a1d836838125c08268e13de9

    • SHA512

      1d0cae94138772ffb87823012e88631ae531720aa0225e30cf298ed0b2326c17c41c64edd9002026eef552a91664edcfcce69b0d3480e44e21b95e7fc7158726

    Score
    10/10
    xpertrattestevasionpersistencerattrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Bypass User Account Control

1
T1088

Disabling Security Tools

3
T1089

Modify Registry

6
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks