Overview

overview

8

Static

static

a29fabf176...59.exe

windows7-x64

8

a29fabf176...59.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a29fabf176589e6e5f54bfa8bb1dd3b9269104bd4af26f8702e0d16b8e412c59

  • Size

    44KB

  • Sample

    221108-194laabch6

  • MD5

    0209a13e3d0f2b978d9e309f68161c76

  • SHA1

    33ccb491cdba8109694bb5d08b0482bd51956e9c

  • SHA256

    a29fabf176589e6e5f54bfa8bb1dd3b9269104bd4af26f8702e0d16b8e412c59

  • SHA512

    39f62d73e8687fd9034050132e8fdc1c8276b7981f023e38400d0c047ec3f0c4bca925499394b1221c8d97e019ad3e38ed9ca0c18f70871b69a7776be9a79a25

  • SSDEEP

    768:9E9qsouMMNK/dwGV9lNjVeleaGVqrdQGnRwPqU3SZflQ3U5Ihr+TW74bfbIEpTpr:vBP/q7X5Rav3k

Score
8/10
discoveryexploitpersistence

Malware Config

Targets

    • Target

      a29fabf176589e6e5f54bfa8bb1dd3b9269104bd4af26f8702e0d16b8e412c59

    • Size

      44KB

    • MD5

      0209a13e3d0f2b978d9e309f68161c76

    • SHA1

      33ccb491cdba8109694bb5d08b0482bd51956e9c

    • SHA256

      a29fabf176589e6e5f54bfa8bb1dd3b9269104bd4af26f8702e0d16b8e412c59

    • SHA512

      39f62d73e8687fd9034050132e8fdc1c8276b7981f023e38400d0c047ec3f0c4bca925499394b1221c8d97e019ad3e38ed9ca0c18f70871b69a7776be9a79a25

    • SSDEEP

      768:9E9qsouMMNK/dwGV9lNjVeleaGVqrdQGnRwPqU3SZflQ3U5Ihr+TW74bfbIEpTpr:vBP/q7X5Rav3k

    Score
    8/10
    discoveryexploitpersistence

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks