Overview

overview

7

Static

static

e95ab1ab73...c9.exe

windows7-x64

7

e95ab1ab73...c9.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e95ab1ab7395a3789973b214acb335cf5d4d0b72f4ffa26213a0af4cd52492c9

  • Size

    314KB

  • Sample

    221123-hy369sef55

  • MD5

    a0669a07b3300539333d55d090a57926

  • SHA1

    e4758113b2f0b07f1769d1bacbbe84b4951194b9

  • SHA256

    e95ab1ab7395a3789973b214acb335cf5d4d0b72f4ffa26213a0af4cd52492c9

  • SHA512

    ddda54c51285500dfa16d5f24103244ff0e90daa2bbbe708ebf6f5ab9205e309a4c8726715d4ba8e1e4737473f738abbd4825ecccaf704b14276cee49f014028

  • SSDEEP

    6144:br5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVtx:brqkuveY3RnV6c800oIpbv0SVtx

Score
7/10
discovery

Malware Config

Targets

    • Target

      e95ab1ab7395a3789973b214acb335cf5d4d0b72f4ffa26213a0af4cd52492c9

    • Size

      314KB

    • MD5

      a0669a07b3300539333d55d090a57926

    • SHA1

      e4758113b2f0b07f1769d1bacbbe84b4951194b9

    • SHA256

      e95ab1ab7395a3789973b214acb335cf5d4d0b72f4ffa26213a0af4cd52492c9

    • SHA512

      ddda54c51285500dfa16d5f24103244ff0e90daa2bbbe708ebf6f5ab9205e309a4c8726715d4ba8e1e4737473f738abbd4825ecccaf704b14276cee49f014028

    • SSDEEP

      6144:br5bUzkuvcBYC47l2xGnV6OjJaV490B6lKPk3JDEbk0teSVtx:brqkuveY3RnV6c800oIpbv0SVtx

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks