Overview

overview

7

Static

static

de787f5c24...47.exe

windows7-x64

7

de787f5c24...47.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de787f5c246c7d0c935729b2c0f0756dc29ea7d619cab3446997feefb2e83547

  • Size

    316KB

  • Sample

    221123-h4qs5aac9v

  • MD5

    dcb62ca936f79d403dc6df69ac5a2d1c

  • SHA1

    6b56b6a57e9dc36ec334d1432648046334e7d076

  • SHA256

    de787f5c246c7d0c935729b2c0f0756dc29ea7d619cab3446997feefb2e83547

  • SHA512

    3d2c61ba6680bd33cc72582ab664ef32da4d02e6d46d658ac2f08ff3055d124455496218f47e4c5c66ace1a1095baa93b4b8355299631e0811412dca8c22c10f

  • SSDEEP

    6144:RrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVP:RrkkuveY3zhlV6tmDxzwVP

Score
7/10
discovery

Malware Config

Targets

    • Target

      de787f5c246c7d0c935729b2c0f0756dc29ea7d619cab3446997feefb2e83547

    • Size

      316KB

    • MD5

      dcb62ca936f79d403dc6df69ac5a2d1c

    • SHA1

      6b56b6a57e9dc36ec334d1432648046334e7d076

    • SHA256

      de787f5c246c7d0c935729b2c0f0756dc29ea7d619cab3446997feefb2e83547

    • SHA512

      3d2c61ba6680bd33cc72582ab664ef32da4d02e6d46d658ac2f08ff3055d124455496218f47e4c5c66ace1a1095baa93b4b8355299631e0811412dca8c22c10f

    • SSDEEP

      6144:RrvbUzkuvcBYC47l2xmDZH4xBsprVIvThDm9FdAZ+x99wVP:RrkkuveY3zhlV6tmDxzwVP

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks