Overview

overview

8

Static

static

890e684ee1...9c.exe

windows7-x64

8

890e684ee1...9c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    890e684ee17ae901669cd6b9a5b3b3b0b8a665fbf55b5baf1f8f92464dda8d9c

  • Size

    72KB

  • Sample

    221119-aalnbahg3v

  • MD5

    061ad849c223f59c0ac6d27aa5e3c186

  • SHA1

    ce7d93816371e70f56594f2377891f9f0f8e6d4c

  • SHA256

    890e684ee17ae901669cd6b9a5b3b3b0b8a665fbf55b5baf1f8f92464dda8d9c

  • SHA512

    d55cdeb46195ebd421556e14c367245869a666b7d8ee9153b193e7490163c3dae9a256d3ad1e8e45cce27df8a7d0743631150c76638d1b918a937aa252e19778

  • SSDEEP

    1536:XDjD9i80x7IqCqmXf0axFV3mXQUwd1A5:XDViJBI4mP0aTVLZk

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      890e684ee17ae901669cd6b9a5b3b3b0b8a665fbf55b5baf1f8f92464dda8d9c

    • Size

      72KB

    • MD5

      061ad849c223f59c0ac6d27aa5e3c186

    • SHA1

      ce7d93816371e70f56594f2377891f9f0f8e6d4c

    • SHA256

      890e684ee17ae901669cd6b9a5b3b3b0b8a665fbf55b5baf1f8f92464dda8d9c

    • SHA512

      d55cdeb46195ebd421556e14c367245869a666b7d8ee9153b193e7490163c3dae9a256d3ad1e8e45cce27df8a7d0743631150c76638d1b918a937aa252e19778

    • SSDEEP

      1536:XDjD9i80x7IqCqmXf0axFV3mXQUwd1A5:XDViJBI4mP0aTVLZk

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks