Overview

overview

8

Static

static

cc210a101b...44.exe

windows7-x64

8

cc210a101b...44.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc210a101bf20a7f53efa98c8d285790893e1a9f9546a907ebc6786074e19144

  • Size

    40KB

  • Sample

    221004-bn5tsafcdj

  • MD5

    3ecfeb4aefb1847f09eb17f5efa2c620

  • SHA1

    2cc83702b7bd42b5902e61d8dbcfcc74bad103f2

  • SHA256

    cc210a101bf20a7f53efa98c8d285790893e1a9f9546a907ebc6786074e19144

  • SHA512

    ff30d004e9577303329e9b756f3c21b7960221a64efd0e0d4656da1f046d07877e09e4e1d005e8c4e7d20a9f907ee4cc09507db99e4c04707e4c336f1a1872cf

  • SSDEEP

    768:/b+NCRYuVGWHh81CGXkKNrzjqGiW/8owfMrFl6/3aQfvPWKP:/LRPGkharzjqGiW/8vZPWKP

Score
8/10
discoveryexploitpersistence

Malware Config

Targets

    • Target

      cc210a101bf20a7f53efa98c8d285790893e1a9f9546a907ebc6786074e19144

    • Size

      40KB

    • MD5

      3ecfeb4aefb1847f09eb17f5efa2c620

    • SHA1

      2cc83702b7bd42b5902e61d8dbcfcc74bad103f2

    • SHA256

      cc210a101bf20a7f53efa98c8d285790893e1a9f9546a907ebc6786074e19144

    • SHA512

      ff30d004e9577303329e9b756f3c21b7960221a64efd0e0d4656da1f046d07877e09e4e1d005e8c4e7d20a9f907ee4cc09507db99e4c04707e4c336f1a1872cf

    • SSDEEP

      768:/b+NCRYuVGWHh81CGXkKNrzjqGiW/8owfMrFl6/3aQfvPWKP:/LRPGkharzjqGiW/8vZPWKP

    Score
    8/10
    discoveryexploitpersistence

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks