Overview

overview

10

Static

static

gunzipped.exe

windows7_x64

10

gunzipped.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gunzipped.exe

  • Size

    672KB

  • Sample

    220412-yr4gfsfgfq

  • MD5

    f6791118160f20fdabe7551a92d2273c

  • SHA1

    ca101b92d768d4884c9de4563921b0f4d9543b62

  • SHA256

    79d55a99ff2f41da092fba879ab1858a9f68619c50eb9b65eebb1b45a500e3bb

  • SHA512

    ef350f7289c086647860bf5ef226691b9d1500d3bd962dfa8aa5c391a10fd98e636f7a4fa15352471fcd5878f813efd50b479a58c584da4464cfb57f54a97773

Score
10/10
xpertratcollectionevasionpersistencerattrojan

Malware Config

Targets

    • Target

      gunzipped.exe

    • Size

      672KB

    • MD5

      f6791118160f20fdabe7551a92d2273c

    • SHA1

      ca101b92d768d4884c9de4563921b0f4d9543b62

    • SHA256

      79d55a99ff2f41da092fba879ab1858a9f68619c50eb9b65eebb1b45a500e3bb

    • SHA512

      ef350f7289c086647860bf5ef226691b9d1500d3bd962dfa8aa5c391a10fd98e636f7a4fa15352471fcd5878f813efd50b479a58c584da4464cfb57f54a97773

    Score
    10/10
    xpertratcollectionevasionpersistencerattrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Bypass User Account Control

1
T1088

Disabling Security Tools

3
T1089

Modify Registry

6
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks