Overview

overview

8

Static

static

fa26669289...a6.exe

windows7-x64

8

fa26669289...a6.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa2666928980d3f0f655b252e41cd4c57399aa368a5e6f9d57282c5440dd6fa6

  • Size

    68KB

  • Sample

    221106-279vyshfej

  • MD5

    0d0d544e4f10081806e7afe1f4aba1d6

  • SHA1

    63f611feffb11ba7bbb415742ea0f405c0f2adf1

  • SHA256

    fa2666928980d3f0f655b252e41cd4c57399aa368a5e6f9d57282c5440dd6fa6

  • SHA512

    f06ed1e3f3f88ff805641bedab4ee1b3f2fb8f0f70224aea086bf0772cea88e97da69dc54487d4bbb05c7bbf03281c428ffe5e6bf2e9796a5041d6e3edcab412

  • SSDEEP

    768:GibQIp1fB4vOfPe1y8egD9OgKnjM+JqW7tQ8GrBmSODbyR4kILpXrCK8IOqe2VXy:jbQIs90j128GrB7OnyR4T8IOj2ly

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      fa2666928980d3f0f655b252e41cd4c57399aa368a5e6f9d57282c5440dd6fa6

    • Size

      68KB

    • MD5

      0d0d544e4f10081806e7afe1f4aba1d6

    • SHA1

      63f611feffb11ba7bbb415742ea0f405c0f2adf1

    • SHA256

      fa2666928980d3f0f655b252e41cd4c57399aa368a5e6f9d57282c5440dd6fa6

    • SHA512

      f06ed1e3f3f88ff805641bedab4ee1b3f2fb8f0f70224aea086bf0772cea88e97da69dc54487d4bbb05c7bbf03281c428ffe5e6bf2e9796a5041d6e3edcab412

    • SSDEEP

      768:GibQIp1fB4vOfPe1y8egD9OgKnjM+JqW7tQ8GrBmSODbyR4kILpXrCK8IOqe2VXy:jbQIs90j128GrB7OnyR4T8IOj2ly

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks