Overview

overview

10

Static

static

570f0edc11...00.exe

windows7-x64

10

570f0edc11...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    570f0edc11211ba042edeb6c3de94b5d236ce1c3b400a0ec0ee633f0636a2200

  • Size

    195KB

  • Sample

    220725-a7149sgbdq

  • MD5

    5233e8c9eb1f618b7681013005a823b3

  • SHA1

    7c2c924d30900cbdff35894b6d9e5da7db0727b2

  • SHA256

    570f0edc11211ba042edeb6c3de94b5d236ce1c3b400a0ec0ee633f0636a2200

  • SHA512

    6b878b6d6635b1b87b3ad63078cb4ec6ed2cb58bdb82a3bc893a8b6919379b2f8d8caa842cc610d1cef246938d390752f9938203b0c739dc51f3515b5a8a80ac

Score
10/10
persistencesuricata

Malware Config

Targets

    • Target

      570f0edc11211ba042edeb6c3de94b5d236ce1c3b400a0ec0ee633f0636a2200

    • Size

      195KB

    • MD5

      5233e8c9eb1f618b7681013005a823b3

    • SHA1

      7c2c924d30900cbdff35894b6d9e5da7db0727b2

    • SHA256

      570f0edc11211ba042edeb6c3de94b5d236ce1c3b400a0ec0ee633f0636a2200

    • SHA512

      6b878b6d6635b1b87b3ad63078cb4ec6ed2cb58bdb82a3bc893a8b6919379b2f8d8caa842cc610d1cef246938d390752f9938203b0c739dc51f3515b5a8a80ac

    Score
    10/10
    persistencesuricata

    • suricata: ET MALWARE Blackmoon/Banbra Configuration Request M2

      suricata: ET MALWARE Blackmoon/Banbra Configuration Request M2

      suricata

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks