Overview

overview

10

Static

static

setup.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    531KB

  • Sample

    211020-we5smsacgp

  • MD5

    3c8978cc4c32a700553ed39c6091a0a2

  • SHA1

    d0443973ea5333d3fd8791a83aae83af20623533

  • SHA256

    4cd2920c8c741ccbf40c29ff706e6798c4d0afd6b3202b6b85fbe851172114b5

  • SHA512

    3a6d39dab2dea45e53de3475c60732483b2d6831a0de6235faa3517414c79a92741f9b56040ed6e31e088d689b158f93cc5d7e47ced1fb00a2e681c502240ce2

Score
10/10
phishing

Malware Config

Targets

    • Target

      setup.exe

    • Size

      531KB

    • MD5

      3c8978cc4c32a700553ed39c6091a0a2

    • SHA1

      d0443973ea5333d3fd8791a83aae83af20623533

    • SHA256

      4cd2920c8c741ccbf40c29ff706e6798c4d0afd6b3202b6b85fbe851172114b5

    • SHA512

      3a6d39dab2dea45e53de3475c60732483b2d6831a0de6235faa3517414c79a92741f9b56040ed6e31e088d689b158f93cc5d7e47ced1fb00a2e681c502240ce2

    Score
    10/10
    phishing

    • Detected phishing page

      phishing

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks