Overview

overview

10

Static

static

b75e1391fc...1f.exe

windows7_x64

10

b75e1391fc...1f.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b75e1391fcb558e42cc05399fa716829114323e1d01aa284445955548302d71f.exe

  • Size

    241KB

  • Sample

    220521-yhyvlsdac8

  • MD5

    23c77075baf7c9ba4e669239a7e1ab4c

  • SHA1

    014421bdb1ea105a6df0c27fc114819ff3637704

  • SHA256

    b75e1391fcb558e42cc05399fa716829114323e1d01aa284445955548302d71f

  • SHA512

    08de7c9228f277fff346c6cdcfc1b27588772339c5be54960e3a16cfb7c4295dd9f87d1a62c02d1805618c939ef66923f5cd86de5c0b6e4e7a2c1a344ab083ab

Score
10/10
evasionsuricatatrojan

Malware Config

Targets

    • Target

      b75e1391fcb558e42cc05399fa716829114323e1d01aa284445955548302d71f.exe

    • Size

      241KB

    • MD5

      23c77075baf7c9ba4e669239a7e1ab4c

    • SHA1

      014421bdb1ea105a6df0c27fc114819ff3637704

    • SHA256

      b75e1391fcb558e42cc05399fa716829114323e1d01aa284445955548302d71f

    • SHA512

      08de7c9228f277fff346c6cdcfc1b27588772339c5be54960e3a16cfb7c4295dd9f87d1a62c02d1805618c939ef66923f5cd86de5c0b6e4e7a2c1a344ab083ab

    Score
    10/10
    evasionsuricatatrojan

    • suricata: ET MALWARE Possible TA410 APT FlowCloud Dependency Download

      suricata: ET MALWARE Possible TA410 APT FlowCloud Dependency Download

      suricata

    • suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M1

      suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M1

      suricata

    • suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M2

      suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M2

      suricata

    • suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M3

      suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M3

      suricata

    • suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M4

      suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M4

      suricata

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks