Overview

overview

8

Static

static

3b6fae2c9d...c0.exe

windows7-x64

8

3b6fae2c9d...c0.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b6fae2c9deed9e65e2a52d0d28d9ce8563a4316bfd62676d58d5b12dcfa47c0

  • Size

    27KB

  • Sample

    221014-k9rcysghgn

  • MD5

    73efb6d5e1bd353f728913cdd72c14a0

  • SHA1

    a4be1e799a7fb79086f6c8dedbfe6176123a5366

  • SHA256

    3b6fae2c9deed9e65e2a52d0d28d9ce8563a4316bfd62676d58d5b12dcfa47c0

  • SHA512

    3e4d1ee8785e6664b97c61d3591aa7bd9aad7f184fc8f204f9eded04e4b1d26b37f7c5b3faac4fd867c71218be096d6e2a0d35bf7e578fdd2c44398dc5fef521

  • SSDEEP

    768:eyHKmM0qauedFQFtxTXKXAx6ZQgZOgRTc7D:ebmMyTcTXfxhgZzT

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      3b6fae2c9deed9e65e2a52d0d28d9ce8563a4316bfd62676d58d5b12dcfa47c0

    • Size

      27KB

    • MD5

      73efb6d5e1bd353f728913cdd72c14a0

    • SHA1

      a4be1e799a7fb79086f6c8dedbfe6176123a5366

    • SHA256

      3b6fae2c9deed9e65e2a52d0d28d9ce8563a4316bfd62676d58d5b12dcfa47c0

    • SHA512

      3e4d1ee8785e6664b97c61d3591aa7bd9aad7f184fc8f204f9eded04e4b1d26b37f7c5b3faac4fd867c71218be096d6e2a0d35bf7e578fdd2c44398dc5fef521

    • SSDEEP

      768:eyHKmM0qauedFQFtxTXKXAx6ZQgZOgRTc7D:ebmMyTcTXfxhgZzT

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Drops startup file

    • Modifies file permissions

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Hidden Files and Directories

1
T1158

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks