Overview

overview

7

Static

static

daaf00fee6...64.exe

windows7-x64

7

daaf00fee6...64.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    daaf00fee60bf78ad3fc0f9f1672b72ec4543e76a09a34177c521d3d493a3964

  • Size

    937KB

  • Sample

    221020-swp7qsbgb5

  • MD5

    0902ca5a76c519c6a404218b62bf9103

  • SHA1

    f1e7192a646589eb9a24ab6bd4508dda03946423

  • SHA256

    daaf00fee60bf78ad3fc0f9f1672b72ec4543e76a09a34177c521d3d493a3964

  • SHA512

    cd9e00c07389f801be53ed67826902d43e8cb2724eaca1ea5c660776768596e95d8f9fbb998f357c9f7576fa1e02c40f8028d5d7cec469f4abc38efd087ca4e8

  • SSDEEP

    12288:Dsr2nXNv6qE3RIDDGFNuDj44aCy712bxLIIIIIIIIIIIIIIIIIOOOgOOOOOOOOOC:gWl66D6X4aCO12Jqbsam09

Score
7/10
agilenet

Malware Config

Targets

    • Target

      daaf00fee60bf78ad3fc0f9f1672b72ec4543e76a09a34177c521d3d493a3964

    • Size

      937KB

    • MD5

      0902ca5a76c519c6a404218b62bf9103

    • SHA1

      f1e7192a646589eb9a24ab6bd4508dda03946423

    • SHA256

      daaf00fee60bf78ad3fc0f9f1672b72ec4543e76a09a34177c521d3d493a3964

    • SHA512

      cd9e00c07389f801be53ed67826902d43e8cb2724eaca1ea5c660776768596e95d8f9fbb998f357c9f7576fa1e02c40f8028d5d7cec469f4abc38efd087ca4e8

    • SSDEEP

      12288:Dsr2nXNv6qE3RIDDGFNuDj44aCy712bxLIIIIIIIIIIIIIIIIIOOOgOOOOOOOOOC:gWl66D6X4aCO12Jqbsam09

    Score
    7/10
    agilenet

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks