Overview

overview

8

Static

static

4

832cafb6e8...9d.exe

windows7_x64

8

832cafb6e8...9d.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    832cafb6e88dd4723002d8b0e2221b3d357c22aaf3cfda3de2017b6378b22d9d

  • Size

    1.3MB

  • Sample

    220130-e973tafgd7

  • MD5

    3c9aa6dc8c4501ffa2798f044df53438

  • SHA1

    0076a7342908f675c1d7bf630ec6912cd75060dd

  • SHA256

    832cafb6e88dd4723002d8b0e2221b3d357c22aaf3cfda3de2017b6378b22d9d

  • SHA512

    0406541e3a89abfefaca7834a3d5cae07d2ce876ef0fa47a51915e464cb80fcad2cd4bb45b81ba026cf15616eafcb6cd97fac73037a1c0635835f376ae398fca

Score
8/10
linkpdfpersistence

Malware Config

Targets

    • Target

      832cafb6e88dd4723002d8b0e2221b3d357c22aaf3cfda3de2017b6378b22d9d

    • Size

      1.3MB

    • MD5

      3c9aa6dc8c4501ffa2798f044df53438

    • SHA1

      0076a7342908f675c1d7bf630ec6912cd75060dd

    • SHA256

      832cafb6e88dd4723002d8b0e2221b3d357c22aaf3cfda3de2017b6378b22d9d

    • SHA512

      0406541e3a89abfefaca7834a3d5cae07d2ce876ef0fa47a51915e464cb80fcad2cd4bb45b81ba026cf15616eafcb6cd97fac73037a1c0635835f376ae398fca

    Score
    8/10
    linkpdfpersistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks