Overview

overview

8

Static

static

d45b54dce4...1a.exe

windows7-x64

8

d45b54dce4...1a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d45b54dce496faffffe40165387793a32eb22e4db98392907c9f0104eb1b711a

  • Size

    96KB

  • Sample

    220918-2n2p8shahq

  • MD5

    641e9944b7ab5bdc073b0e5b6148b352

  • SHA1

    81c69b50a126bb3de7ca4fe7a1c7a81bb792ca2b

  • SHA256

    d45b54dce496faffffe40165387793a32eb22e4db98392907c9f0104eb1b711a

  • SHA512

    1b069ae54f053cd7feb9f63c1fa9b1a307d644d74b42733632af72adae751e7a5e5aa66e43e7a0c154de1b39015020cd26dbf16d72ad582ef3ba1ef63a767c48

  • SSDEEP

    1536:4es7yD0DAzhW0w4ZtgNxO9tMZMpbMqqJI7Jy2Z47gViGMru:4i0D+suZ3pbMqqJI7w7g+

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      d45b54dce496faffffe40165387793a32eb22e4db98392907c9f0104eb1b711a

    • Size

      96KB

    • MD5

      641e9944b7ab5bdc073b0e5b6148b352

    • SHA1

      81c69b50a126bb3de7ca4fe7a1c7a81bb792ca2b

    • SHA256

      d45b54dce496faffffe40165387793a32eb22e4db98392907c9f0104eb1b711a

    • SHA512

      1b069ae54f053cd7feb9f63c1fa9b1a307d644d74b42733632af72adae751e7a5e5aa66e43e7a0c154de1b39015020cd26dbf16d72ad582ef3ba1ef63a767c48

    • SSDEEP

      1536:4es7yD0DAzhW0w4ZtgNxO9tMZMpbMqqJI7Jy2Z47gViGMru:4i0D+suZ3pbMqqJI7w7g+

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Deletes itself

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks