Overview

overview

10

Static

static

10

ea4b1369c2...10.exe

windows7_x64

10

ea4b1369c2...10.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea4b1369c2b16be51c78e2a2734a16ea02784a2ab1edc05cc6613418d315d610

  • Size

    713KB

  • Sample

    220520-p3xnlscda5

  • MD5

    5c9d5674d31ac4c6687372fd02bb1f57

  • SHA1

    7fcc5bdad26e37f6933c60b8c3b73401bc301ee2

  • SHA256

    ea4b1369c2b16be51c78e2a2734a16ea02784a2ab1edc05cc6613418d315d610

  • SHA512

    6030b3cb6733d305ccae5f1f33917b6dc92a6b9cb0aa6260e3d5c05c4de9b668799306916f575b96d04c154850c3c53588190b211b6ef4c9c14650716c2e1b29

Score
10/10
webmonitorpersistencesuricataupx

Malware Config

Targets

    • Target

      ea4b1369c2b16be51c78e2a2734a16ea02784a2ab1edc05cc6613418d315d610

    • Size

      713KB

    • MD5

      5c9d5674d31ac4c6687372fd02bb1f57

    • SHA1

      7fcc5bdad26e37f6933c60b8c3b73401bc301ee2

    • SHA256

      ea4b1369c2b16be51c78e2a2734a16ea02784a2ab1edc05cc6613418d315d610

    • SHA512

      6030b3cb6733d305ccae5f1f33917b6dc92a6b9cb0aa6260e3d5c05c4de9b668799306916f575b96d04c154850c3c53588190b211b6ef4c9c14650716c2e1b29

    Score
    10/10
    persistencesuricata

    • suricata: ET MALWARE WebMonitor/RevCode RAT CnC Domain in DNS Lookup

      suricata: ET MALWARE WebMonitor/RevCode RAT CnC Domain in DNS Lookup

      suricata

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks