Overview

overview

7

Static

static

facf7bc1f8...a1.exe

windows7-x64

7

facf7bc1f8...a1.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    facf7bc1f85f7f6fbb1795cc8a759e1ff44f7cae1e5f614b99fed200e60101a1

  • Size

    313KB

  • Sample

    221123-hqzh4sec48

  • MD5

    9de605d24382d0004b6f448fc1ad1c84

  • SHA1

    94e629988530966443685a80829641654ea71f5a

  • SHA256

    facf7bc1f85f7f6fbb1795cc8a759e1ff44f7cae1e5f614b99fed200e60101a1

  • SHA512

    4521281ec03ebcb6408c6aed17bc0260977f9df4b14b7f94d53cfc7cee626b91cb20752708510b2db148239c20cbda02bbcfad4294b4df14fa30ba7a5ea66ca8

  • SSDEEP

    6144:yrkP9uEo2S1YnQmCX492DkwNP3qpYFpdteedaMtBxOWUevASojincBSs:yrkFu6/eIo4mdt2M/lUevAzicX

Score
7/10
discovery

Malware Config

Targets

    • Target

      facf7bc1f85f7f6fbb1795cc8a759e1ff44f7cae1e5f614b99fed200e60101a1

    • Size

      313KB

    • MD5

      9de605d24382d0004b6f448fc1ad1c84

    • SHA1

      94e629988530966443685a80829641654ea71f5a

    • SHA256

      facf7bc1f85f7f6fbb1795cc8a759e1ff44f7cae1e5f614b99fed200e60101a1

    • SHA512

      4521281ec03ebcb6408c6aed17bc0260977f9df4b14b7f94d53cfc7cee626b91cb20752708510b2db148239c20cbda02bbcfad4294b4df14fa30ba7a5ea66ca8

    • SSDEEP

      6144:yrkP9uEo2S1YnQmCX492DkwNP3qpYFpdteedaMtBxOWUevASojincBSs:yrkFu6/eIo4mdt2M/lUevAzicX

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks