Overview

overview

7

Static

static

35217fd2a2...a7.exe

windows7-x64

7

35217fd2a2...a7.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35217fd2a2a56c9e2f4afa55ccf25e11573d88da0f7b567baf06529398980ea7

  • Size

    312KB

  • Sample

    221123-kg29rahb23

  • MD5

    c46c39871b78130ebfdace497ffae2ad

  • SHA1

    deb95e51ef0db095a7c5514d678c73120b6925f9

  • SHA256

    35217fd2a2a56c9e2f4afa55ccf25e11573d88da0f7b567baf06529398980ea7

  • SHA512

    1095d4a5c60fdc372503d7c74853f60376d649ee8365d9aff0e2f24d3dfa10dbe58ab5d1f8988ae795de8aadc85b2ca9c6d25470b07ea6069de7da9e8f35a820

  • SSDEEP

    6144:VrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzc:Vrfu6/eIo4XwlWKM231t5UnRr3DdRp5J

Score
7/10
discovery

Malware Config

Targets

    • Target

      35217fd2a2a56c9e2f4afa55ccf25e11573d88da0f7b567baf06529398980ea7

    • Size

      312KB

    • MD5

      c46c39871b78130ebfdace497ffae2ad

    • SHA1

      deb95e51ef0db095a7c5514d678c73120b6925f9

    • SHA256

      35217fd2a2a56c9e2f4afa55ccf25e11573d88da0f7b567baf06529398980ea7

    • SHA512

      1095d4a5c60fdc372503d7c74853f60376d649ee8365d9aff0e2f24d3dfa10dbe58ab5d1f8988ae795de8aadc85b2ca9c6d25470b07ea6069de7da9e8f35a820

    • SSDEEP

      6144:VrJ9uEo2S1YnQmCX492DkwNP3qpYFkwlWKM23DpJQ+JXUOy1Lr3Dv1A+CiyGdUzc:Vrfu6/eIo4XwlWKM231t5UnRr3DdRp5J

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks