Overview

overview

10

Static

static

gunzipped.exe

windows7_x64

10

gunzipped.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gunzipped.exe

  • Size

    779KB

  • Sample

    220428-xzjlksfcb8

  • MD5

    35bae2ba86b623253862081f92189b89

  • SHA1

    bff426f0ac4efde0220ad6d9e83a689424788e07

  • SHA256

    203b1fb92f8332c49a73ce25fa00194c0ef50a243e97822e7c33d7db739b9fe0

  • SHA512

    adfa1bf11e00a19024a808022679b8e0e893957e60b4d0dd2751617e4f399fe028d3847d72a57d37f1a0a4de0cf7107610cfa2f373403bbb34a4fa785c0cc90f

Score
10/10
xpertratcollectionevasionpersistencerattrojan

Malware Config

Targets

    • Target

      gunzipped.exe

    • Size

      779KB

    • MD5

      35bae2ba86b623253862081f92189b89

    • SHA1

      bff426f0ac4efde0220ad6d9e83a689424788e07

    • SHA256

      203b1fb92f8332c49a73ce25fa00194c0ef50a243e97822e7c33d7db739b9fe0

    • SHA512

      adfa1bf11e00a19024a808022679b8e0e893957e60b4d0dd2751617e4f399fe028d3847d72a57d37f1a0a4de0cf7107610cfa2f373403bbb34a4fa785c0cc90f

    Score
    10/10
    xpertratcollectionevasionpersistencerattrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Bypass User Account Control

1
T1088

Defense Evasion

Bypass User Account Control

1
T1088

Disabling Security Tools

3
T1089

Modify Registry

6
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks