Overview

overview

10

Static

static

gunzipped.exe

windows7_x64

1

gunzipped.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gunzipped.exe

  • Size

    892KB

  • Sample

    220428-n44ymsfhep

  • MD5

    76ee7c7ec27ac1d8ac5b42ce1813b3f4

  • SHA1

    5cf06e9981723e56996ed0a7c19f677ca0e1d187

  • SHA256

    6068e249773f4636d788ac7793a6184c02d3107fdbdc9209b0ebe59761883189

  • SHA512

    ff5a6b7daffdba0d05823b79c6251eeb82f6c43bf21dd65c558367e205a0753740e9dc823dbc9e74c798e62dd6aeee8b43e8a394fbebd71e814d174bb3e6e4ed

Score
10/10
xpertratcollectionevasionpersistencerattrojan

Malware Config

Targets

    • Target

      gunzipped.exe

    • Size

      892KB

    • MD5

      76ee7c7ec27ac1d8ac5b42ce1813b3f4

    • SHA1

      5cf06e9981723e56996ed0a7c19f677ca0e1d187

    • SHA256

      6068e249773f4636d788ac7793a6184c02d3107fdbdc9209b0ebe59761883189

    • SHA512

      ff5a6b7daffdba0d05823b79c6251eeb82f6c43bf21dd65c558367e205a0753740e9dc823dbc9e74c798e62dd6aeee8b43e8a394fbebd71e814d174bb3e6e4ed

    Score
    10/10
    xpertratcollectionevasionpersistencerattrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Bypass User Account Control

1
T1088

Disabling Security Tools

3
T1089

Modify Registry

6
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks