Overview

overview

7

Static

static

WAXE8BB.tmp.exe

windows7_x64

1

WAXE8BB.tmp.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WAXE8BB.tmp

  • Size

    8.5MB

  • Sample

    211007-np1bxaccc9

  • MD5

    3bb9fab5db7a39bb92fea50b1e5847e0

  • SHA1

    0c77af1d4fabfba73faf990d7d2384e7f96c61b0

  • SHA256

    ae636de9b33c5f5d977ad9bb9fb24e83b077fc68eeb0297456792da762a08d41

  • SHA512

    a3cde6738018db98372ebcbde0f3816621aa16a21b28223baa94a1053865b6e026422cf92709ab9c751aaf4799fabf783feedbb0d78d4990f4a14a6cb17dc307

Score
7/10
microsoftphishing

Malware Config

Targets

    • Target

      WAXE8BB.tmp

    • Size

      8.5MB

    • MD5

      3bb9fab5db7a39bb92fea50b1e5847e0

    • SHA1

      0c77af1d4fabfba73faf990d7d2384e7f96c61b0

    • SHA256

      ae636de9b33c5f5d977ad9bb9fb24e83b077fc68eeb0297456792da762a08d41

    • SHA512

      a3cde6738018db98372ebcbde0f3816621aa16a21b28223baa94a1053865b6e026422cf92709ab9c751aaf4799fabf783feedbb0d78d4990f4a14a6cb17dc307

    Score
    7/10
    microsoftphishing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks