Overview

overview

8

Static

static

b1b4a65909...32.exe

windows7-x64

8

b1b4a65909...32.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1b4a65909869ac8841b92b02f6654eced71ea022fcb02e489b413231c736c32

  • Size

    1.3MB

  • Sample

    221029-qpsyyahhbk

  • MD5

    3c4db28819a33c3eed4b6c96d9cf8113

  • SHA1

    a3e69dccf4f300ca38850a958cffc4ac3f9bd9a9

  • SHA256

    b1b4a65909869ac8841b92b02f6654eced71ea022fcb02e489b413231c736c32

  • SHA512

    f0477f93b010979de911bc2d42a720296ac8304666894e6f5c2f1a06aebf51842cbe22580b33bd5bfc801ed3f080d7d10200cc52f6ce4931c6ba2356a44c449e

  • SSDEEP

    24576:0xlKDEjd6OnmwPdBoSJbnF9pTjqULHNjtw7lOTcwSHRXGJE:Wc1w6StFvTnLFmOTiHR

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      b1b4a65909869ac8841b92b02f6654eced71ea022fcb02e489b413231c736c32

    • Size

      1.3MB

    • MD5

      3c4db28819a33c3eed4b6c96d9cf8113

    • SHA1

      a3e69dccf4f300ca38850a958cffc4ac3f9bd9a9

    • SHA256

      b1b4a65909869ac8841b92b02f6654eced71ea022fcb02e489b413231c736c32

    • SHA512

      f0477f93b010979de911bc2d42a720296ac8304666894e6f5c2f1a06aebf51842cbe22580b33bd5bfc801ed3f080d7d10200cc52f6ce4931c6ba2356a44c449e

    • SSDEEP

      24576:0xlKDEjd6OnmwPdBoSJbnF9pTjqULHNjtw7lOTcwSHRXGJE:Wc1w6StFvTnLFmOTiHR

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks