Resubmissions

27-10-2022 16:10

221027-tmrjwacggm 10

21-02-2022 16:53

220221-vecanabffq 8

General

  • Target

    msvcr170.dll

  • Size

    250KB

  • Sample

    220221-vecanabffq

  • MD5

    6ac740ebf98df7217d31cb826a207af6

  • SHA1

    6bf6fc77b10f6700fa0b868f6d3515b495d1e1e0

  • SHA256

    2f11ca3dcc1d9400e141d8f3ee9a7a0d18e21908e825990f5c22119214fbb2f5

  • SHA512

    e0d57245047e3689f4804ed75dfcf9b1468473952a5a6bdab5ff164af1b3e5fc220ba0d737a53cb3f8318e10ef42c3ff5a5763487e2b10c785aab14eacbcde5c

Score
8/10

Malware Config

Targets

    • Target

      msvcr170.dll

    • Size

      250KB

    • MD5

      6ac740ebf98df7217d31cb826a207af6

    • SHA1

      6bf6fc77b10f6700fa0b868f6d3515b495d1e1e0

    • SHA256

      2f11ca3dcc1d9400e141d8f3ee9a7a0d18e21908e825990f5c22119214fbb2f5

    • SHA512

      e0d57245047e3689f4804ed75dfcf9b1468473952a5a6bdab5ff164af1b3e5fc220ba0d737a53cb3f8318e10ef42c3ff5a5763487e2b10c785aab14eacbcde5c

    Score
    8/10
    • Blocklisted process makes network request

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks