Overview

overview

8

Static

static

433315d9a9...b8.exe

windows7-x64

8

433315d9a9...b8.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    433315d9a9856629fc75c1bccc8fe7a23af36c037503a9a67689f087e0d915b8

  • Size

    40KB

  • Sample

    221004-cmqh5sgge4

  • MD5

    045898fb4fc6526e8a6afc5597009056

  • SHA1

    1b3cc90c6d85015370ae9f68fcafad6cf429687b

  • SHA256

    433315d9a9856629fc75c1bccc8fe7a23af36c037503a9a67689f087e0d915b8

  • SHA512

    71fcf3f3f9f31ebb7a85036160ebc043fb4b871307a617898d15690774cdf2b9b1bf3d36293d8def18b40b0fc7b719a0f32eac7126a8d082e2e02786c548115c

  • SSDEEP

    768:/3NTI4ixr2+LwT6WgPEiqBCFIQAbm12yOHYwpIfpVMyXM6:/NGSXQlOGfpVMyc6

Score
8/10
discoveryexploitpersistence

Malware Config

Targets

    • Target

      433315d9a9856629fc75c1bccc8fe7a23af36c037503a9a67689f087e0d915b8

    • Size

      40KB

    • MD5

      045898fb4fc6526e8a6afc5597009056

    • SHA1

      1b3cc90c6d85015370ae9f68fcafad6cf429687b

    • SHA256

      433315d9a9856629fc75c1bccc8fe7a23af36c037503a9a67689f087e0d915b8

    • SHA512

      71fcf3f3f9f31ebb7a85036160ebc043fb4b871307a617898d15690774cdf2b9b1bf3d36293d8def18b40b0fc7b719a0f32eac7126a8d082e2e02786c548115c

    • SSDEEP

      768:/3NTI4ixr2+LwT6WgPEiqBCFIQAbm12yOHYwpIfpVMyXM6:/NGSXQlOGfpVMyc6

    Score
    8/10
    discoveryexploitpersistence

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks