Overview

overview

7

Static

static

4b7b432d9c...04.exe

windows7-x64

4b7b432d9c...04.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b7b432d9c6c178cbea6b1f9dce67a29bcd9dc12d384947062a85afcee339d04

  • Size

    314KB

  • Sample

    221123-kdaekacc6v

  • MD5

    9b9be12a0d1466ea211a4f226c911960

  • SHA1

    e0aa61c90931dbbfd4ae622da4b12507e8e93038

  • SHA256

    4b7b432d9c6c178cbea6b1f9dce67a29bcd9dc12d384947062a85afcee339d04

  • SHA512

    36b15e33ca6abb95d08bde99bec15cbd37db4530cb084302497db1608ccb0e42a4a413c407723c36a6ffeaa7866c9cbdc5febd3ebd9ee0f58bc3bdb73328ae0d

  • SSDEEP

    6144:1reyVm/tSbUzkuvcBYC47l2xywzjVaXJuM39ZLg5FxXsD+49oCg0omP:1rzVm/pkuveY3nwdatzg5fXsD+49lg9c

Score
7/10
discovery

Malware Config

Targets

    • Target

      4b7b432d9c6c178cbea6b1f9dce67a29bcd9dc12d384947062a85afcee339d04

    • Size

      314KB

    • MD5

      9b9be12a0d1466ea211a4f226c911960

    • SHA1

      e0aa61c90931dbbfd4ae622da4b12507e8e93038

    • SHA256

      4b7b432d9c6c178cbea6b1f9dce67a29bcd9dc12d384947062a85afcee339d04

    • SHA512

      36b15e33ca6abb95d08bde99bec15cbd37db4530cb084302497db1608ccb0e42a4a413c407723c36a6ffeaa7866c9cbdc5febd3ebd9ee0f58bc3bdb73328ae0d

    • SSDEEP

      6144:1reyVm/tSbUzkuvcBYC47l2xywzjVaXJuM39ZLg5FxXsD+49oCg0omP:1rzVm/pkuveY3nwdatzg5fXsD+49lg9c

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks