Overview

overview

8

Static

static

fc648ef36d...a8.exe

windows7-x64

8

fc648ef36d...a8.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc648ef36d04ec585120f3a6415edb7fab6a4a79d4865ee83088eaa172c0e0a8

  • Size

    48KB

  • Sample

    221021-wcy73sghf6

  • MD5

    10ee7cce9524e4d2720a32f8fea16010

  • SHA1

    d7e89b4db2324da4dec5d020946c2eb92484f4ba

  • SHA256

    fc648ef36d04ec585120f3a6415edb7fab6a4a79d4865ee83088eaa172c0e0a8

  • SHA512

    4bf913bc1910dcceadb5471b63972303fe1d580bc2eb077ca221f31ddcf7fb6a448552021fe0142be7e3aa5ad631237a23a7bdc134980e275062a463e43fd268

  • SSDEEP

    768:sy8oLLO1jQ4e0gIXVSJQ+Ma6wJsdt4ftfAtmGVC0LxZ76CTXh6:HFyH5+4w+tYA8GVFm6h6

Score
8/10
discoveryexploitpersistence

Malware Config

Targets

    • Target

      fc648ef36d04ec585120f3a6415edb7fab6a4a79d4865ee83088eaa172c0e0a8

    • Size

      48KB

    • MD5

      10ee7cce9524e4d2720a32f8fea16010

    • SHA1

      d7e89b4db2324da4dec5d020946c2eb92484f4ba

    • SHA256

      fc648ef36d04ec585120f3a6415edb7fab6a4a79d4865ee83088eaa172c0e0a8

    • SHA512

      4bf913bc1910dcceadb5471b63972303fe1d580bc2eb077ca221f31ddcf7fb6a448552021fe0142be7e3aa5ad631237a23a7bdc134980e275062a463e43fd268

    • SSDEEP

      768:sy8oLLO1jQ4e0gIXVSJQ+Ma6wJsdt4ftfAtmGVC0LxZ76CTXh6:HFyH5+4w+tYA8GVFm6h6

    Score
    8/10
    discoveryexploitpersistence

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks