Overview

overview

8

Static

static

45abec5d4a...28.exe

windows7_x64

8

45abec5d4a...28.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45abec5d4a3c0ee52819a559ebf3ff7818b32e957cdbb200840f069304de8a28

  • Size

    32KB

  • Sample

    220520-2n6n7aagcn

  • MD5

    02e15e86b25abc73a72490628362c738

  • SHA1

    7f0db53d1eb74e9df8a430f425284258e5b4f997

  • SHA256

    45abec5d4a3c0ee52819a559ebf3ff7818b32e957cdbb200840f069304de8a28

  • SHA512

    cd362c088b4774a0fde88298b316308b3356508edd6d2b2d1984543184922ca4bd88d4d748c33a11564a21a51d79eeee8c45488f696ac705d4cb6d0ccbe023f3

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      45abec5d4a3c0ee52819a559ebf3ff7818b32e957cdbb200840f069304de8a28

    • Size

      32KB

    • MD5

      02e15e86b25abc73a72490628362c738

    • SHA1

      7f0db53d1eb74e9df8a430f425284258e5b4f997

    • SHA256

      45abec5d4a3c0ee52819a559ebf3ff7818b32e957cdbb200840f069304de8a28

    • SHA512

      cd362c088b4774a0fde88298b316308b3356508edd6d2b2d1984543184922ca4bd88d4d748c33a11564a21a51d79eeee8c45488f696ac705d4cb6d0ccbe023f3

    Score
    8/10
    evasionpersistence

    • Modifies Windows Firewall

      evasion

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks