Overview

overview

8

Static

static

f04bda4839...18.exe

windows7-x64

8

f04bda4839...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f04bda4839e0e23480ff96288086cfba799b958d5478161299fdfaebab902f18

  • Size

    40KB

  • Sample

    221002-l626qacadm

  • MD5

    6fb7128ff497f4072f4478d684cbcab1

  • SHA1

    dfecc74718f3636d382fabdadf6f85ec000bc715

  • SHA256

    f04bda4839e0e23480ff96288086cfba799b958d5478161299fdfaebab902f18

  • SHA512

    b0df7afa8641b6a9bdcb24fbcc81b01f8b826d2fb72eca5b4e86a96cc50f2d172323a3ffb2c3c82dcda57c9bc96271ed1e93ed1b736e33a756ce76784cf391f9

  • SSDEEP

    768:/GklvetkSuW2UY2F+lUQXarWYw2ssUZZXVy0alOIH:/GiqkSGOF+lUTWYsy0aOIH

Score
8/10
discoveryexploitpersistence

Malware Config

Targets

    • Target

      f04bda4839e0e23480ff96288086cfba799b958d5478161299fdfaebab902f18

    • Size

      40KB

    • MD5

      6fb7128ff497f4072f4478d684cbcab1

    • SHA1

      dfecc74718f3636d382fabdadf6f85ec000bc715

    • SHA256

      f04bda4839e0e23480ff96288086cfba799b958d5478161299fdfaebab902f18

    • SHA512

      b0df7afa8641b6a9bdcb24fbcc81b01f8b826d2fb72eca5b4e86a96cc50f2d172323a3ffb2c3c82dcda57c9bc96271ed1e93ed1b736e33a756ce76784cf391f9

    • SSDEEP

      768:/GklvetkSuW2UY2F+lUQXarWYw2ssUZZXVy0alOIH:/GiqkSGOF+lUTWYsy0aOIH

    Score
    8/10
    discoveryexploitpersistence

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks