Overview

overview

8

Static

static

3162cff8a2...08.exe

windows7-x64

8

3162cff8a2...08.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3162cff8a26079015c8ef925917f58505a6a920335efde0f2d5799ee13abac08

  • Size

    36KB

  • Sample

    221001-znb4gagcfr

  • MD5

    055dcc1eb949b67e63dd8d0d8c6359e6

  • SHA1

    1e3dd05441904f4c8c662cb1dbf6f405bf9b0c05

  • SHA256

    3162cff8a26079015c8ef925917f58505a6a920335efde0f2d5799ee13abac08

  • SHA512

    0a75e8aadb0fd6d060334573c1b4e58ccfa5e21b7d4f02905fe1aefb12b053a0cf7dfc70b5bd45054614b1016a14f33262a7f14e7f62afe7db57084e01b52c1b

  • SSDEEP

    384:/TXuV4FSsVFBY/4a+QegFAw7giczitZqqNEiQ8T0OQr2hcw6vLPh+Jg8U9iu54M4:/Y4FSsTaneQAw9BiqR0O0lwDXG

Score
8/10
discoveryexploitpersistence

Malware Config

Targets

    • Target

      3162cff8a26079015c8ef925917f58505a6a920335efde0f2d5799ee13abac08

    • Size

      36KB

    • MD5

      055dcc1eb949b67e63dd8d0d8c6359e6

    • SHA1

      1e3dd05441904f4c8c662cb1dbf6f405bf9b0c05

    • SHA256

      3162cff8a26079015c8ef925917f58505a6a920335efde0f2d5799ee13abac08

    • SHA512

      0a75e8aadb0fd6d060334573c1b4e58ccfa5e21b7d4f02905fe1aefb12b053a0cf7dfc70b5bd45054614b1016a14f33262a7f14e7f62afe7db57084e01b52c1b

    • SSDEEP

      384:/TXuV4FSsVFBY/4a+QegFAw7giczitZqqNEiQ8T0OQr2hcw6vLPh+Jg8U9iu54M4:/Y4FSsTaneQAw9BiqR0O0lwDXG

    Score
    8/10
    discoveryexploitpersistence

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks