Overview

overview

8

Static

static

2cdffe34c4...4e.exe

windows7-x64

8

2cdffe34c4...4e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cdffe34c4a8bb1f41b18299d1aea771daf6aed34dc1134d502fd5e655c5464e

  • Size

    1.4MB

  • Sample

    221120-f7dlvscg3y

  • MD5

    48fcf3f1050b46510289f70675102a40

  • SHA1

    9d532631d9b934070bc7caab50e524c52e3586dc

  • SHA256

    2cdffe34c4a8bb1f41b18299d1aea771daf6aed34dc1134d502fd5e655c5464e

  • SHA512

    ade6c604b9df8c08f0f668538d9c7d7cabbb641d6eab29d1118c2f31a8ff26832fddd2a2e27ab76161638e9c4e32d5c6006db3e1231d0c64b029d2316dfb66f2

  • SSDEEP

    24576:INmF/mnBoDM5f7F2RdcclPqVX7TwBTGQOD6N+FrFtTp3I1gRUfbVx5rLIhkp8TRu:IYVZo5TcRB1oNp4v7L81u

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      2cdffe34c4a8bb1f41b18299d1aea771daf6aed34dc1134d502fd5e655c5464e

    • Size

      1.4MB

    • MD5

      48fcf3f1050b46510289f70675102a40

    • SHA1

      9d532631d9b934070bc7caab50e524c52e3586dc

    • SHA256

      2cdffe34c4a8bb1f41b18299d1aea771daf6aed34dc1134d502fd5e655c5464e

    • SHA512

      ade6c604b9df8c08f0f668538d9c7d7cabbb641d6eab29d1118c2f31a8ff26832fddd2a2e27ab76161638e9c4e32d5c6006db3e1231d0c64b029d2316dfb66f2

    • SSDEEP

      24576:INmF/mnBoDM5f7F2RdcclPqVX7TwBTGQOD6N+FrFtTp3I1gRUfbVx5rLIhkp8TRu:IYVZo5TcRB1oNp4v7L81u

    Score
    8/10
    discoveryexploit

    • Executes dropped EXE

    • Possible privilege escalation attempt

      exploit

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks