Overview

overview

7

Static

static

3421daf3b1...fb.exe

windows7-x64

7

3421daf3b1...fb.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3421daf3b1ba44719535dce81128539a2e72780406f9e25c340e5373f8ccfdfb

  • Size

    316KB

  • Sample

    221123-kg8rjace2s

  • MD5

    c18aaacdf960ae9dbfc3766b8dec5481

  • SHA1

    bbe87f4b04bae6221ee5a87f2c2593fdb4a1ec94

  • SHA256

    3421daf3b1ba44719535dce81128539a2e72780406f9e25c340e5373f8ccfdfb

  • SHA512

    6b508d8cf6c1ebfcf843cc6c19616d6a27877235690ab022a27bfca1129db84bf3f265546ff854bf3f43a17c4bec0e62bbda3d093f477be28a7a1004910eebf2

  • SSDEEP

    6144:aribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xtk:ar7kuveY33FJUo7MDkA62k

Score
7/10
discovery

Malware Config

Targets

    • Target

      3421daf3b1ba44719535dce81128539a2e72780406f9e25c340e5373f8ccfdfb

    • Size

      316KB

    • MD5

      c18aaacdf960ae9dbfc3766b8dec5481

    • SHA1

      bbe87f4b04bae6221ee5a87f2c2593fdb4a1ec94

    • SHA256

      3421daf3b1ba44719535dce81128539a2e72780406f9e25c340e5373f8ccfdfb

    • SHA512

      6b508d8cf6c1ebfcf843cc6c19616d6a27877235690ab022a27bfca1129db84bf3f265546ff854bf3f43a17c4bec0e62bbda3d093f477be28a7a1004910eebf2

    • SSDEEP

      6144:aribUzkuvcBYC47l2xLNaFmoKZLxtHU/TMDkW01eedmQb+xtk:ar7kuveY33FJUo7MDkA62k

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks