Overview

overview

10

Static

static

1

RT 009435 ...B).exe

windows7_x64

10

RT 009435 ...B).exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RT 009435 PO-20220207.pdf(78KB).exe

  • Size

    344KB

  • Sample

    220207-jz1cfahgb4

  • MD5

    2c9e55d24d5853836195834ea08d31ba

  • SHA1

    d4b531649a46e252dbaa6bdb279b9dc18d8b3bd4

  • SHA256

    524881f1bcc00d0a27ab7829b776e32844b3e9f19cea0bfae32b95a6a8006ffc

  • SHA512

    8fe29a8a484016b335ceb85d417f0375d59f5e2995c734d65cf8c4c10b787520cf1bca6475d6b07cb027b5410fe8155003c0668d70b4b7eb21be31fbdd8644cd

Score
10/10
xpertratcollectionevasionpersistencerattrojan

Malware Config

Targets

    • Target

      RT 009435 PO-20220207.pdf(78KB).exe

    • Size

      344KB

    • MD5

      2c9e55d24d5853836195834ea08d31ba

    • SHA1

      d4b531649a46e252dbaa6bdb279b9dc18d8b3bd4

    • SHA256

      524881f1bcc00d0a27ab7829b776e32844b3e9f19cea0bfae32b95a6a8006ffc

    • SHA512

      8fe29a8a484016b335ceb85d417f0375d59f5e2995c734d65cf8c4c10b787520cf1bca6475d6b07cb027b5410fe8155003c0668d70b4b7eb21be31fbdd8644cd

    Score
    10/10
    xpertratcollectionevasionpersistencerattrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Bypass User Account Control

1
T1088

Disabling Security Tools

3
T1089

Modify Registry

6
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks