Overview

overview

8

Static

static

1bc01a9de6...60.exe

windows7-x64

7

1bc01a9de6...60.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bc01a9de6f3bfd74db2174255224c5bd6903fb9722afd0e9cc492e50ff73f60

  • Size

    30KB

  • Sample

    221122-xyx3kshe9z

  • MD5

    7f832522934d3034af0fcd529b7e1595

  • SHA1

    85d3e42a2e1ddca118d572e416c2e5f619ec69f7

  • SHA256

    1bc01a9de6f3bfd74db2174255224c5bd6903fb9722afd0e9cc492e50ff73f60

  • SHA512

    3e56c0f98d0c04a9aeed6977ae908d04c19c2b945cfe301b619ddeae93879a8d084a0a6cfcaa5565b51c3e33d9cd4e1b98b74bf2c4ebc93b7c702abf1b1178d0

  • SSDEEP

    768:WKHHTyxuINi6TqHIZfC917xi3+Meo0Nbw4lUubXkD:WkVkDG0fCnNqluplUkX

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      1bc01a9de6f3bfd74db2174255224c5bd6903fb9722afd0e9cc492e50ff73f60

    • Size

      30KB

    • MD5

      7f832522934d3034af0fcd529b7e1595

    • SHA1

      85d3e42a2e1ddca118d572e416c2e5f619ec69f7

    • SHA256

      1bc01a9de6f3bfd74db2174255224c5bd6903fb9722afd0e9cc492e50ff73f60

    • SHA512

      3e56c0f98d0c04a9aeed6977ae908d04c19c2b945cfe301b619ddeae93879a8d084a0a6cfcaa5565b51c3e33d9cd4e1b98b74bf2c4ebc93b7c702abf1b1178d0

    • SSDEEP

      768:WKHHTyxuINi6TqHIZfC917xi3+Meo0Nbw4lUubXkD:WkVkDG0fCnNqluplUkX

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Deletes itself

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks