Overview

overview

7

Static

static

b0eb633d3e...80.exe

windows7-x64

7

b0eb633d3e...80.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0eb633d3e18b6e26e806e1664085db54b0405d5cc1a1714d0cdc12ffc38c880

  • Size

    316KB

  • Sample

    221123-jqttasbc4y

  • MD5

    d9015cda3dd5d8560964bb788d20fd92

  • SHA1

    1266d7c28f134bd9c34d1952b23d4803f0ac8fd0

  • SHA256

    b0eb633d3e18b6e26e806e1664085db54b0405d5cc1a1714d0cdc12ffc38c880

  • SHA512

    689a62e7fc419aaf26e9258c77259a7be07465f0202ef8f00138fa253cea26a0a26e13ffbcb8b0de45a611840251af918f8acaf7be53e202f4085c648c68982f

  • SSDEEP

    6144:Rr9bUzkuvcBYC47l2xA0CLzrfn5Agvirxi/NRFBDAr+:Rr+kuveY3hdLzrfn5A1KtBR

Score
7/10
discovery

Malware Config

Targets

    • Target

      b0eb633d3e18b6e26e806e1664085db54b0405d5cc1a1714d0cdc12ffc38c880

    • Size

      316KB

    • MD5

      d9015cda3dd5d8560964bb788d20fd92

    • SHA1

      1266d7c28f134bd9c34d1952b23d4803f0ac8fd0

    • SHA256

      b0eb633d3e18b6e26e806e1664085db54b0405d5cc1a1714d0cdc12ffc38c880

    • SHA512

      689a62e7fc419aaf26e9258c77259a7be07465f0202ef8f00138fa253cea26a0a26e13ffbcb8b0de45a611840251af918f8acaf7be53e202f4085c648c68982f

    • SSDEEP

      6144:Rr9bUzkuvcBYC47l2xA0CLzrfn5Agvirxi/NRFBDAr+:Rr+kuveY3hdLzrfn5A1KtBR

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks