Overview

overview

8

Static

static

21d6758a39...f8.exe

windows7-x64

8

21d6758a39...f8.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21d6758a391c13c6b47c236747722102b5e01f1c8e72362cef8aa87c154138f8

  • Size

    64KB

  • Sample

    221119-ajealaeb28

  • MD5

    0175dabeac051e7eab1ed1d6577f2381

  • SHA1

    f9d2e6822687828288ccde9a68adad3da8ef7a87

  • SHA256

    21d6758a391c13c6b47c236747722102b5e01f1c8e72362cef8aa87c154138f8

  • SHA512

    9aa0a613d737833406f27a63137e6d0dd6b1cbb41f4d3290cce4f2a0bd315727624afac003cff72864677b22bec65491e475746362f577309dbafa4abcc62a91

  • SSDEEP

    768:kHXvbNU1/AEQCd4Rida+EcL+VT/DHhwV4JmC4nySV3XBmFSTWepIpiO90XP:kfbmHLGjDHhwSJD4nPHA0NIpiEWP

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      21d6758a391c13c6b47c236747722102b5e01f1c8e72362cef8aa87c154138f8

    • Size

      64KB

    • MD5

      0175dabeac051e7eab1ed1d6577f2381

    • SHA1

      f9d2e6822687828288ccde9a68adad3da8ef7a87

    • SHA256

      21d6758a391c13c6b47c236747722102b5e01f1c8e72362cef8aa87c154138f8

    • SHA512

      9aa0a613d737833406f27a63137e6d0dd6b1cbb41f4d3290cce4f2a0bd315727624afac003cff72864677b22bec65491e475746362f577309dbafa4abcc62a91

    • SSDEEP

      768:kHXvbNU1/AEQCd4Rida+EcL+VT/DHhwV4JmC4nySV3XBmFSTWepIpiO90XP:kfbmHLGjDHhwSJD4nPHA0NIpiEWP

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks