Overview

overview

10

Static

static

SPELIST012...df.exe

windows7_x64

10

SPELIST012...df.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SPELIST0120Dec-130073_164300887Spec_Pdf.exe

  • Size

    1.3MB

  • Sample

    211221-n6weaadch2

  • MD5

    38f21e75ff73996220385c651b977d13

  • SHA1

    c46c478a05c788c60abccf265d58de93115da221

  • SHA256

    0580f2e1a63c8db40f25570a673b1620d753d28f55101dd5f9d8270755d69261

  • SHA512

    28cbaa62ddc069ec325a61bdb585be6ef76265f9ee1fb75560e19ed99fa429387b488217942fc1e7c1393cefc7546d82abbe63f02ad321d90b31a5682ba1a069

Score
10/10
xpertratcollectionevasionpersistencerattrojan

Malware Config

Targets

    • Target

      SPELIST0120Dec-130073_164300887Spec_Pdf.exe

    • Size

      1.3MB

    • MD5

      38f21e75ff73996220385c651b977d13

    • SHA1

      c46c478a05c788c60abccf265d58de93115da221

    • SHA256

      0580f2e1a63c8db40f25570a673b1620d753d28f55101dd5f9d8270755d69261

    • SHA512

      28cbaa62ddc069ec325a61bdb585be6ef76265f9ee1fb75560e19ed99fa429387b488217942fc1e7c1393cefc7546d82abbe63f02ad321d90b31a5682ba1a069

    Score
    10/10
    xpertratcollectionevasionpersistencerattrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Bypass User Account Control

1
T1088

Disabling Security Tools

3
T1089

Modify Registry

6
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks