Overview

overview

7

Static

static

e95b048549...17.exe

windows7-x64

7

e95b048549...17.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e95b0485497eaa6a423c69984f811981f5d5cef6d06d4a36bf69e2ff95057b17

  • Size

    316KB

  • Sample

    221123-hy3kqsef54

  • MD5

    b1870de4d43e8854288b0cafc77bed93

  • SHA1

    510d0852394244ecb8f6543e9214d0ae9f7951b2

  • SHA256

    e95b0485497eaa6a423c69984f811981f5d5cef6d06d4a36bf69e2ff95057b17

  • SHA512

    64e31011f4a23ad4c324859bef9ef65189d2beaad902b13004a63c5c6ebd6d69f0407ae619c16ca41ab463534e4966bcba2a6f37300930d7903081d081b57099

  • SSDEEP

    6144:Gr9bUzkuvcBYC47l2xjWM4ZZU4An9U+WTASry:Gr+kuveY3mWZW4An9U7TASry

Score
7/10
discovery

Malware Config

Targets

    • Target

      e95b0485497eaa6a423c69984f811981f5d5cef6d06d4a36bf69e2ff95057b17

    • Size

      316KB

    • MD5

      b1870de4d43e8854288b0cafc77bed93

    • SHA1

      510d0852394244ecb8f6543e9214d0ae9f7951b2

    • SHA256

      e95b0485497eaa6a423c69984f811981f5d5cef6d06d4a36bf69e2ff95057b17

    • SHA512

      64e31011f4a23ad4c324859bef9ef65189d2beaad902b13004a63c5c6ebd6d69f0407ae619c16ca41ab463534e4966bcba2a6f37300930d7903081d081b57099

    • SSDEEP

      6144:Gr9bUzkuvcBYC47l2xjWM4ZZU4An9U+WTASry:Gr+kuveY3mWZW4An9U7TASry

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks