Overview

overview

7

Static

static

643d5a3d84...72.exe

windows7-x64

7

643d5a3d84...72.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    643d5a3d8423c70ed331f6d469ad2cd2451abb896341f8e6f461c913d36a6472

  • Size

    327KB

  • Sample

    221123-j8tk9aca8s

  • MD5

    b76a0d3397e9c96a97e129cf00cb011a

  • SHA1

    156a6658197957fb8a6e894d81d59315a56e8d06

  • SHA256

    643d5a3d8423c70ed331f6d469ad2cd2451abb896341f8e6f461c913d36a6472

  • SHA512

    184f0ab58a1397028ccfcad407e2a58a101a7029c0a2d09116be15ba5f356ce405512e35c74a095364be0dfe51cda608ce71891428077b159125dd8db0a8e460

  • SSDEEP

    6144:Br469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F3:Br4iu6/eIo4Rsw33AtsmQe

Score
7/10
discovery

Malware Config

Targets

    • Target

      643d5a3d8423c70ed331f6d469ad2cd2451abb896341f8e6f461c913d36a6472

    • Size

      327KB

    • MD5

      b76a0d3397e9c96a97e129cf00cb011a

    • SHA1

      156a6658197957fb8a6e894d81d59315a56e8d06

    • SHA256

      643d5a3d8423c70ed331f6d469ad2cd2451abb896341f8e6f461c913d36a6472

    • SHA512

      184f0ab58a1397028ccfcad407e2a58a101a7029c0a2d09116be15ba5f356ce405512e35c74a095364be0dfe51cda608ce71891428077b159125dd8db0a8e460

    • SSDEEP

      6144:Br469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6F3:Br4iu6/eIo4Rsw33AtsmQe

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks