Overview

overview

10

Static

static

64b36c4fb4...f1.exe

windows7-x64

10

64b36c4fb4...f1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64b36c4fb46dbbba5bc43fb88563c70fd9a44a61c5f89a0a43967834f4906ef1

  • Size

    60KB

  • Sample

    221121-t9gm7adc5s

  • MD5

    124e413e40f45b52fb965cdc5818ede9

  • SHA1

    aa541b2ea3f21ca83c13b564e02131f67070655f

  • SHA256

    64b36c4fb46dbbba5bc43fb88563c70fd9a44a61c5f89a0a43967834f4906ef1

  • SHA512

    5aee8aa474417427f75d8294bc4c37034d5d820a145159a08460d8aa091b3cefea71f5d91d34966fb68c0bbfdc16f8c5efc08a3b5bfdcdfb5d44a4df63b610dc

  • SSDEEP

    768:C8BWhOJdF2zb/gspsWrpmLJ1N2v/QHTlHqnxQTuYHhLFRjHG8vkza:9JdFXdWAN1w/0JHqxQiYh7a8vEa

Score
10/10
microsoftevasionpersistencephishing

Malware Config

Targets

    • Target

      64b36c4fb46dbbba5bc43fb88563c70fd9a44a61c5f89a0a43967834f4906ef1

    • Size

      60KB

    • MD5

      124e413e40f45b52fb965cdc5818ede9

    • SHA1

      aa541b2ea3f21ca83c13b564e02131f67070655f

    • SHA256

      64b36c4fb46dbbba5bc43fb88563c70fd9a44a61c5f89a0a43967834f4906ef1

    • SHA512

      5aee8aa474417427f75d8294bc4c37034d5d820a145159a08460d8aa091b3cefea71f5d91d34966fb68c0bbfdc16f8c5efc08a3b5bfdcdfb5d44a4df63b610dc

    • SSDEEP

      768:C8BWhOJdF2zb/gspsWrpmLJ1N2v/QHTlHqnxQTuYHhLFRjHG8vkza:9JdFXdWAN1w/0JHqxQiYh7a8vEa

    Score
    10/10
    evasionmicrosoftpersistencephishing

    • Modifies firewall policy service

      evasion

    • Adds Run key to start application

      persistence

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

4
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks