Overview

overview

7

Static

static

3

ed1b8ecb82...63.exe

windows7_x64

7

ed1b8ecb82...63.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed1b8ecb82dcdf896791aadeb9d85344b7e8229f4355dcf24e7c7cee39818f63

  • Size

    5.7MB

  • Sample

    220520-wp4y4abec6

  • MD5

    0a2480dee0105e3cf1bacf79d6bc279c

  • SHA1

    79caa6e3dd9615e8d4d4157d37738bafdc3d7925

  • SHA256

    ed1b8ecb82dcdf896791aadeb9d85344b7e8229f4355dcf24e7c7cee39818f63

  • SHA512

    a843363292f5c96d02a046b4b95b188d374930234a2dfce1391a0c3bb4292662d2e961f716d6901b6b70c4543d5e8b9cf286398ffee8f8133d2da65d5866116a

Score
7/10
persistencepyinstaller

Malware Config

Targets

    • Target

      ed1b8ecb82dcdf896791aadeb9d85344b7e8229f4355dcf24e7c7cee39818f63

    • Size

      5.7MB

    • MD5

      0a2480dee0105e3cf1bacf79d6bc279c

    • SHA1

      79caa6e3dd9615e8d4d4157d37738bafdc3d7925

    • SHA256

      ed1b8ecb82dcdf896791aadeb9d85344b7e8229f4355dcf24e7c7cee39818f63

    • SHA512

      a843363292f5c96d02a046b4b95b188d374930234a2dfce1391a0c3bb4292662d2e961f716d6901b6b70c4543d5e8b9cf286398ffee8f8133d2da65d5866116a

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks