Overview

overview

6

Static

static

5

3d423c0817...22.exe

windows7-x64

6

3d423c0817...22.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d423c08177f0939ec0a4c010d0c8513e2d78c38cfc6b3b35cbe974589086b22

  • Size

    873KB

  • Sample

    221001-267n7scfcr

  • MD5

    0184f48ae44b8cd7b20173d0e53dd120

  • SHA1

    311c933431ee3bc397e702c77bff933ead1262f1

  • SHA256

    3d423c08177f0939ec0a4c010d0c8513e2d78c38cfc6b3b35cbe974589086b22

  • SHA512

    194320b330ec4258d9b95d03602245713721293d32a63a01abf1d2c85a1de36ea9ad3ca7a12475337900f2b405210be2617e2afabc49c77fb14bc041bfcbca72

  • SSDEEP

    12288:zhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4avG9ORZ4JxKiHaZQHuMtL2:5RmJkcoQricOIQxiZY1iavG4wzxY

Score
6/10
microsoftpersistencephishing

Malware Config

Targets

    • Target

      3d423c08177f0939ec0a4c010d0c8513e2d78c38cfc6b3b35cbe974589086b22

    • Size

      873KB

    • MD5

      0184f48ae44b8cd7b20173d0e53dd120

    • SHA1

      311c933431ee3bc397e702c77bff933ead1262f1

    • SHA256

      3d423c08177f0939ec0a4c010d0c8513e2d78c38cfc6b3b35cbe974589086b22

    • SHA512

      194320b330ec4258d9b95d03602245713721293d32a63a01abf1d2c85a1de36ea9ad3ca7a12475337900f2b405210be2617e2afabc49c77fb14bc041bfcbca72

    • SSDEEP

      12288:zhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4avG9ORZ4JxKiHaZQHuMtL2:5RmJkcoQricOIQxiZY1iavG4wzxY

    Score
    6/10
    persistencemicrosoftphishing

    • Adds Run key to start application

      persistence

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks