Overview

overview

7

Static

static

5b8f9135de...f9.exe

windows7-x64

7

5b8f9135de...f9.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b8f9135de00c04415d21b0884a2b0925d4af1714c8fe27cdfcaec072a3c39f9

  • Size

    314KB

  • Sample

    221123-kalcnacb5y

  • MD5

    efeccb5a160f237ac6710169e1add49c

  • SHA1

    f1a3cb807444465704bdb72d29e9438363c729fe

  • SHA256

    5b8f9135de00c04415d21b0884a2b0925d4af1714c8fe27cdfcaec072a3c39f9

  • SHA512

    348398d201cee7badb9d011a589e398da6e8f46753313bc3e6b6050bdac16746e41fd22e3d451d7607b8939546b2007ce6332c095344895b74421de1609a2b59

  • SSDEEP

    6144:Nr2bUzkuvcBYC47l2xib6HwzFyytCr88oDG1GI25i1snqq08:Nr/kuveY3dGwUECr88oDG1GIS+bq08

Score
7/10
discovery

Malware Config

Targets

    • Target

      5b8f9135de00c04415d21b0884a2b0925d4af1714c8fe27cdfcaec072a3c39f9

    • Size

      314KB

    • MD5

      efeccb5a160f237ac6710169e1add49c

    • SHA1

      f1a3cb807444465704bdb72d29e9438363c729fe

    • SHA256

      5b8f9135de00c04415d21b0884a2b0925d4af1714c8fe27cdfcaec072a3c39f9

    • SHA512

      348398d201cee7badb9d011a589e398da6e8f46753313bc3e6b6050bdac16746e41fd22e3d451d7607b8939546b2007ce6332c095344895b74421de1609a2b59

    • SSDEEP

      6144:Nr2bUzkuvcBYC47l2xib6HwzFyytCr88oDG1GI25i1snqq08:Nr/kuveY3dGwUECr88oDG1GIS+bq08

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks