Overview

overview

7

Static

static

fa637c1769...ff.exe

windows7-x64

7

fa637c1769...ff.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa637c176906bf8af21a4163717bb7e16bad8f21d2cbf3f5ff945a1d3d3c7cff

  • Size

    327KB

  • Sample

    221123-hq5p5aec56

  • MD5

    f93ef909d4d41d37fe4ae3a900681475

  • SHA1

    d3391d503e4f0b7ca48b0da49da31b36c73ba688

  • SHA256

    fa637c176906bf8af21a4163717bb7e16bad8f21d2cbf3f5ff945a1d3d3c7cff

  • SHA512

    9ed7df8b554c429224dd2ca791f4c63adec2e8729dc92b3dcc35d54da4e2dfff64eba2f11567f077fe9fb306532c2f0331c98777a3d4e6d73952524243429096

  • SSDEEP

    6144:Br469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FQ:Br4iu6/eIo4Rsw33AtsmQ5

Score
7/10
discovery

Malware Config

Targets

    • Target

      fa637c176906bf8af21a4163717bb7e16bad8f21d2cbf3f5ff945a1d3d3c7cff

    • Size

      327KB

    • MD5

      f93ef909d4d41d37fe4ae3a900681475

    • SHA1

      d3391d503e4f0b7ca48b0da49da31b36c73ba688

    • SHA256

      fa637c176906bf8af21a4163717bb7e16bad8f21d2cbf3f5ff945a1d3d3c7cff

    • SHA512

      9ed7df8b554c429224dd2ca791f4c63adec2e8729dc92b3dcc35d54da4e2dfff64eba2f11567f077fe9fb306532c2f0331c98777a3d4e6d73952524243429096

    • SSDEEP

      6144:Br469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FQ:Br4iu6/eIo4Rsw33AtsmQ5

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks