Overview

overview

7

Static

static

49ae4e7ba1...7a.exe

windows7-x64

7

49ae4e7ba1...7a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49ae4e7ba1e765b9cf8a7e76f5a9edf6bc3a466c65d035d8c99740190219727a

  • Size

    327KB

  • Sample

    221123-kdn8qacc7s

  • MD5

    d09119073d6fee1dfd73fda8b85345f7

  • SHA1

    882cc5c8be84de78e2fa365eb4a73a47b729b2f5

  • SHA256

    49ae4e7ba1e765b9cf8a7e76f5a9edf6bc3a466c65d035d8c99740190219727a

  • SHA512

    35f8088a341389263c9e8e178c5cb1b6c38b98edf2fe0e1a262077e310555cb9ab79ad472f99b1b25b5e64f78cfad40f397d6e69df72c5c0e95465d1e83e3764

  • SSDEEP

    6144:MrpbUzkuvcBYC47l2xKYEti5hHHQ9qZGoBRonSUIDdpK6KMydWz:MrakuveY3PYT5xQrdVUbK6KMydC

Score
7/10
discovery

Malware Config

Targets

    • Target

      49ae4e7ba1e765b9cf8a7e76f5a9edf6bc3a466c65d035d8c99740190219727a

    • Size

      327KB

    • MD5

      d09119073d6fee1dfd73fda8b85345f7

    • SHA1

      882cc5c8be84de78e2fa365eb4a73a47b729b2f5

    • SHA256

      49ae4e7ba1e765b9cf8a7e76f5a9edf6bc3a466c65d035d8c99740190219727a

    • SHA512

      35f8088a341389263c9e8e178c5cb1b6c38b98edf2fe0e1a262077e310555cb9ab79ad472f99b1b25b5e64f78cfad40f397d6e69df72c5c0e95465d1e83e3764

    • SSDEEP

      6144:MrpbUzkuvcBYC47l2xKYEti5hHHQ9qZGoBRonSUIDdpK6KMydWz:MrakuveY3PYT5xQrdVUbK6KMydC

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks