Overview

overview

8

Static

static

467ec03238...96.exe

windows7-x64

8

467ec03238...96.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    467ec03238d1519b9fd6e33a86cfa56482eb7e46944159923c9c3eef25a37d96

  • Size

    48KB

  • Sample

    221029-2phnraacg4

  • MD5

    84550a470d64741bddeac10dd5fc3400

  • SHA1

    3ce186ad5e8b60c501dc47171d06535f330a9182

  • SHA256

    467ec03238d1519b9fd6e33a86cfa56482eb7e46944159923c9c3eef25a37d96

  • SHA512

    e6971062eff87d6df1ff0811638636ad38121cfffe39fe93571718163669af6bf3f332cecadea7dc0526971010df6a56232a484cb956183db56fe40431f819a1

  • SSDEEP

    768:45OBeEZILA2YyK8EZl14ohEnZkA2XI6AGJc27yXN1:40BHcgl148EnD2XIZ8c27UN1

Score
8/10
discoveryexploitpersistence

Malware Config

Targets

    • Target

      467ec03238d1519b9fd6e33a86cfa56482eb7e46944159923c9c3eef25a37d96

    • Size

      48KB

    • MD5

      84550a470d64741bddeac10dd5fc3400

    • SHA1

      3ce186ad5e8b60c501dc47171d06535f330a9182

    • SHA256

      467ec03238d1519b9fd6e33a86cfa56482eb7e46944159923c9c3eef25a37d96

    • SHA512

      e6971062eff87d6df1ff0811638636ad38121cfffe39fe93571718163669af6bf3f332cecadea7dc0526971010df6a56232a484cb956183db56fe40431f819a1

    • SSDEEP

      768:45OBeEZILA2YyK8EZl14ohEnZkA2XI6AGJc27yXN1:40BHcgl148EnD2XIZ8c27UN1

    Score
    8/10
    discoveryexploitpersistence

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks