Overview

overview

7

Static

static

b8a417e9ee...82.exe

windows7-x64

7

b8a417e9ee...82.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8a417e9eed039df5bdd2d9ae91a1d5ce908993adda4ea6cd72db2f483954c82

  • Size

    327KB

  • Sample

    221123-jmaw1sfg32

  • MD5

    1d1ed76e6b516b30b38be70028d11f53

  • SHA1

    e110d42df349fff1644612b7269ec942a0b47286

  • SHA256

    b8a417e9eed039df5bdd2d9ae91a1d5ce908993adda4ea6cd72db2f483954c82

  • SHA512

    2d6ed03c69576a535108cab95adf608eba97935a6d02cc74d2cfc248d42dd97505e77dc50ac93d1eb3d28948d42add1fa7fc2ab49d498486a71c1232cbcdec6d

  • SSDEEP

    6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FZ:pr4iu6/eIo4Rsw33AtsmQc

Score
7/10
discovery

Malware Config

Targets

    • Target

      b8a417e9eed039df5bdd2d9ae91a1d5ce908993adda4ea6cd72db2f483954c82

    • Size

      327KB

    • MD5

      1d1ed76e6b516b30b38be70028d11f53

    • SHA1

      e110d42df349fff1644612b7269ec942a0b47286

    • SHA256

      b8a417e9eed039df5bdd2d9ae91a1d5ce908993adda4ea6cd72db2f483954c82

    • SHA512

      2d6ed03c69576a535108cab95adf608eba97935a6d02cc74d2cfc248d42dd97505e77dc50ac93d1eb3d28948d42add1fa7fc2ab49d498486a71c1232cbcdec6d

    • SSDEEP

      6144:pr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FZ:pr4iu6/eIo4Rsw33AtsmQc

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks