Overview

overview

7

Static

static

ee1a38642e...2a.exe

windows7-x64

7

ee1a38642e...2a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee1a38642e3ef41be9dbc4f133044a4ac0ef7cc2e66cb5c2d77863a17e1beb2a

  • Size

    327KB

  • Sample

    221123-hxbevsaa6s

  • MD5

    7829977c47af67fb00741bf460a8ed91

  • SHA1

    46d05b6a5905ca55fd6f8086b6fff2bb0c5238fb

  • SHA256

    ee1a38642e3ef41be9dbc4f133044a4ac0ef7cc2e66cb5c2d77863a17e1beb2a

  • SHA512

    07f54261dffea13174803704091335b066ad574a428e0e3aa4e7fe646a1e10dd1c9396b4b82c011c9f969089dd7d38717da96c84464f658cb20bbc4fc7f50af1

  • SSDEEP

    6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fs:Zr4iu6/eIo4Rsw33AtsmQh

Score
7/10
discovery

Malware Config

Targets

    • Target

      ee1a38642e3ef41be9dbc4f133044a4ac0ef7cc2e66cb5c2d77863a17e1beb2a

    • Size

      327KB

    • MD5

      7829977c47af67fb00741bf460a8ed91

    • SHA1

      46d05b6a5905ca55fd6f8086b6fff2bb0c5238fb

    • SHA256

      ee1a38642e3ef41be9dbc4f133044a4ac0ef7cc2e66cb5c2d77863a17e1beb2a

    • SHA512

      07f54261dffea13174803704091335b066ad574a428e0e3aa4e7fe646a1e10dd1c9396b4b82c011c9f969089dd7d38717da96c84464f658cb20bbc4fc7f50af1

    • SSDEEP

      6144:Zr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6Fs:Zr4iu6/eIo4Rsw33AtsmQh

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks