Overview

overview

7

Static

static

d3b08a8706...54.exe

windows7-x64

7

d3b08a8706...54.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3b08a8706143cb5b4769ccdfc3092b0bcd8e4ccd044b3049588293fd9c51354

  • Size

    314KB

  • Sample

    221123-h9bw6afb38

  • MD5

    d7674be2e2e0725ec819dbd252c16106

  • SHA1

    849f5d37ee5ca72195578d7354225416be9a8280

  • SHA256

    d3b08a8706143cb5b4769ccdfc3092b0bcd8e4ccd044b3049588293fd9c51354

  • SHA512

    fdbd93d017740f6af92e7fa63438e2f9ee6e8dd198b10752d18b9bb427b8fd74183418a663e4b309af03b659cf2f4687e18f9edfbad35ddfbd8f5dc469afd10c

  • SSDEEP

    6144:qr5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVt3:qrqkuveY3RnV6c800oIpbv0SVt3

Score
7/10
discovery

Malware Config

Targets

    • Target

      d3b08a8706143cb5b4769ccdfc3092b0bcd8e4ccd044b3049588293fd9c51354

    • Size

      314KB

    • MD5

      d7674be2e2e0725ec819dbd252c16106

    • SHA1

      849f5d37ee5ca72195578d7354225416be9a8280

    • SHA256

      d3b08a8706143cb5b4769ccdfc3092b0bcd8e4ccd044b3049588293fd9c51354

    • SHA512

      fdbd93d017740f6af92e7fa63438e2f9ee6e8dd198b10752d18b9bb427b8fd74183418a663e4b309af03b659cf2f4687e18f9edfbad35ddfbd8f5dc469afd10c

    • SSDEEP

      6144:qr5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVt3:qrqkuveY3RnV6c800oIpbv0SVt3

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks