Overview

overview

7

Static

static

f7ae67fa73...e2.exe

windows7-x64

7

f7ae67fa73...e2.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7ae67fa7321efff6b12ec35dd5b9e743a2a858b44effcba2744b920742dc3e2

  • Size

    327KB

  • Sample

    221123-hsamrsec89

  • MD5

    cd0adbac00b0900e747cf727654516c0

  • SHA1

    a542e0badb2214aa14e4c883c97b12e6a9caa0c2

  • SHA256

    f7ae67fa7321efff6b12ec35dd5b9e743a2a858b44effcba2744b920742dc3e2

  • SHA512

    7ccd369e61c99f667ed031301c97ac72d8d24a8eb69e35911c61942f32ba8fe6d82e84b11641034f305de762c7cb808967e02a4b5ff64549751de418f94cad01

  • SSDEEP

    6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fu:Zr4iu6/eIo4Rsw33AtsmQX

Score
7/10
discovery

Malware Config

Targets

    • Target

      f7ae67fa7321efff6b12ec35dd5b9e743a2a858b44effcba2744b920742dc3e2

    • Size

      327KB

    • MD5

      cd0adbac00b0900e747cf727654516c0

    • SHA1

      a542e0badb2214aa14e4c883c97b12e6a9caa0c2

    • SHA256

      f7ae67fa7321efff6b12ec35dd5b9e743a2a858b44effcba2744b920742dc3e2

    • SHA512

      7ccd369e61c99f667ed031301c97ac72d8d24a8eb69e35911c61942f32ba8fe6d82e84b11641034f305de762c7cb808967e02a4b5ff64549751de418f94cad01

    • SSDEEP

      6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fu:Zr4iu6/eIo4Rsw33AtsmQX

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks