Overview

overview

8

Static

static

pinrules.stl

windows7-x64

8

pinrules.stl

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pinrulesstl.cab

  • Size

    7KB

  • Sample

    220804-wyds9sagbq

  • MD5

    fb60e1afe48764e6bf78719c07813d32

  • SHA1

    a1dc74ef8495c9a1489dd937659b5c2875027e16

  • SHA256

    ebf3e7290b8fd1e5509caa69335251f22b61baf3f9ff87b4e8544f3c1fea279d

  • SHA512

    92baa53445ec1a6ec049af875783619d255ab4a46241b456bd87ae0043c117740bd117406e2cf5440840c68d0c573cba7b40f58587ce7796d254d0b06e9b7973

Score
8/10

Malware Config

Targets

    • Target

      pinrules.stl

    • Size

      17KB

    • MD5

      ffa4c0dd7b7601ee3ac59cee61e0803e

    • SHA1

      167e53131eee30c41b28d466a7af835368289867

    • SHA256

      48ac1b4059632ff4e41215da733af9d8e4e506fabad0f13e9b03362687cad9e5

    • SHA512

      332fe8cc86e950d87a25b2af947836ba0eb9ebe46c1907b492f9e0037034e7d60af1e27484d96d32ac575ab52b4e28532b3c13467d29b291f1f51bb706567cc3

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks