Overview

overview

8

Static

static

11ffeec3f4...2a.exe

windows7-x64

8

11ffeec3f4...2a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11ffeec3f4fed5eddb165eeeb7dcc5b90f6d145f6769306de80f953b4204202a

  • Size

    1.5MB

  • Sample

    221120-f7eh6acg3z

  • MD5

    428b12438e19486171dcb1fed5fb0e30

  • SHA1

    a889bbd78950a4dc9f9ac9aabe599e65e50b9374

  • SHA256

    11ffeec3f4fed5eddb165eeeb7dcc5b90f6d145f6769306de80f953b4204202a

  • SHA512

    354acd1914f01d0781625c052b0a045cd941847d75ffae1134016fcb673c52c24e0080b0cb33c6f3ba36cff6457b3a5fdfbe4b0bdd86c2a331ac251abe8a0404

  • SSDEEP

    24576:ENmF/mnBoDM5f7F2iQRKZk+61i5cCPWZj+VhmdO1j+72gJQnpJYT1e1G6wuYYIKT:EYVZo5TciQqk+61i5cYWZjSY8+cnpJYs

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      11ffeec3f4fed5eddb165eeeb7dcc5b90f6d145f6769306de80f953b4204202a

    • Size

      1.5MB

    • MD5

      428b12438e19486171dcb1fed5fb0e30

    • SHA1

      a889bbd78950a4dc9f9ac9aabe599e65e50b9374

    • SHA256

      11ffeec3f4fed5eddb165eeeb7dcc5b90f6d145f6769306de80f953b4204202a

    • SHA512

      354acd1914f01d0781625c052b0a045cd941847d75ffae1134016fcb673c52c24e0080b0cb33c6f3ba36cff6457b3a5fdfbe4b0bdd86c2a331ac251abe8a0404

    • SSDEEP

      24576:ENmF/mnBoDM5f7F2iQRKZk+61i5cCPWZj+VhmdO1j+72gJQnpJYT1e1G6wuYYIKT:EYVZo5TciQqk+61i5cYWZjSY8+cnpJYs

    Score
    8/10
    discoveryexploit

    • Executes dropped EXE

    • Possible privilege escalation attempt

      exploit

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks