Overview

overview

10

Static

static

wiretransf...89.exe

windows7_x64

10

wiretransf...89.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    wire transfer (395 KB).msg

  • Size

    394KB

  • Sample

    211222-n4hqeagbdp

  • MD5

    55a828cd1a31375e8b3c3e6d9a251f06

  • SHA1

    f3d779749e472a7c57006659547b68683ac9458b

  • SHA256

    0947cabca9029af4f121313237788bb0e7c21847b570601fa59956e7380f3356

  • SHA512

    30a0fbbe40eaa4c2613830615af77fdb058c3b3d8a56eac05944971aa91df98b9f574f5549d06c02319163f8f66fd0de093cfe03c8200fe9ad4dfb18b1b7f6ae

Score
10/10
xpertratevasionpersistencerattrojan

Malware Config

Targets

    • Target

      wiretransfer009387489.exe

    • Size

      424KB

    • MD5

      4f5e20c314951e30f5ca01a71559a62c

    • SHA1

      8910f34119c522fed7dee3f545ed7aa67396baec

    • SHA256

      467693bbef8580dd6eab668a628d44e94548710be1cc60799f8e17df8c63f88a

    • SHA512

      e39657f0dbab0cf9056e41d753e8c26e83b4d2b23cafedbb3652e588bf248f538c1fa1ed6017c4cee5bfde8304cb6d1b521bc12191547321195f0578e160f012

    Score
    10/10
    xpertratevasionpersistencerattrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Bypass User Account Control

1
T1088

Disabling Security Tools

3
T1089

Modify Registry

6
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks