Overview

overview

8

Static

static

f23151487f...52.exe

windows7-x64

8

f23151487f...52.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f23151487f40e62851daaccfe9238684c96c2fc1f90d636b06a28597e9132a52

  • Size

    1.4MB

  • Sample

    221108-xb2r9acae9

  • MD5

    0f7a27bba78bdee47cb83bbf7c5fe340

  • SHA1

    52ca32e52ffd733842ddabeb7244ee7dda46c364

  • SHA256

    f23151487f40e62851daaccfe9238684c96c2fc1f90d636b06a28597e9132a52

  • SHA512

    351f273603493abfbaef48815c972eb657cfa40d94eb490385673f21dc06d5e6626aa45bb538c1ecc5f47b34e8fbd37ad350c5b27e6556558b5cde8ae1a521c0

  • SSDEEP

    24576:1NmF/mnBoDM5f7F2zQRKZk+61i5cCPWZj+VhEgaTpRoqPJgXfMcgHyaN:1YVZo5TczQqk+61i5cYWZjSi3pWKAMcI

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      f23151487f40e62851daaccfe9238684c96c2fc1f90d636b06a28597e9132a52

    • Size

      1.4MB

    • MD5

      0f7a27bba78bdee47cb83bbf7c5fe340

    • SHA1

      52ca32e52ffd733842ddabeb7244ee7dda46c364

    • SHA256

      f23151487f40e62851daaccfe9238684c96c2fc1f90d636b06a28597e9132a52

    • SHA512

      351f273603493abfbaef48815c972eb657cfa40d94eb490385673f21dc06d5e6626aa45bb538c1ecc5f47b34e8fbd37ad350c5b27e6556558b5cde8ae1a521c0

    • SSDEEP

      24576:1NmF/mnBoDM5f7F2zQRKZk+61i5cCPWZj+VhEgaTpRoqPJgXfMcgHyaN:1YVZo5TczQqk+61i5cYWZjSi3pWKAMcI

    Score
    8/10
    discoveryexploit

    • Executes dropped EXE

    • Possible privilege escalation attempt

      exploit

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks