Overview

overview

7

Static

static

b5faa27f3e...cf.exe

windows7-x64

7

b5faa27f3e...cf.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5faa27f3ec4c9798ff6f9b9661fb630550887840fb692e4c29a875780ceb0cf

  • Size

    315KB

  • Sample

    221123-jnftnabb5w

  • MD5

    b83410b16594473e13672e489a816fa2

  • SHA1

    2898e7ab52dd1deac6a6a42947f9319a9b9c6378

  • SHA256

    b5faa27f3ec4c9798ff6f9b9661fb630550887840fb692e4c29a875780ceb0cf

  • SHA512

    96eb0acbe200fc4949dd91c211f9be81886947e395c09188acfa7dda622676ed71632de99c1f7b1a9d000bb38b7e55b332e4f6795588a4ec968881429c214c0d

  • SSDEEP

    6144:+rYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs53:+rdkuveY36kjZP/XKxlSZAHy

Score
7/10
discovery

Malware Config

Targets

    • Target

      b5faa27f3ec4c9798ff6f9b9661fb630550887840fb692e4c29a875780ceb0cf

    • Size

      315KB

    • MD5

      b83410b16594473e13672e489a816fa2

    • SHA1

      2898e7ab52dd1deac6a6a42947f9319a9b9c6378

    • SHA256

      b5faa27f3ec4c9798ff6f9b9661fb630550887840fb692e4c29a875780ceb0cf

    • SHA512

      96eb0acbe200fc4949dd91c211f9be81886947e395c09188acfa7dda622676ed71632de99c1f7b1a9d000bb38b7e55b332e4f6795588a4ec968881429c214c0d

    • SSDEEP

      6144:+rYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs53:+rdkuveY36kjZP/XKxlSZAHy

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks