Overview

overview

7

Static

static

2ad43417c0...ff.exe

windows7-x64

7

2ad43417c0...ff.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ad43417c04584f51054406e6636018d3fbfdc3dec5cd2d4760b798c5bc7b9ff

  • Size

    314KB

  • Sample

    221123-kjvbxsce7y

  • MD5

    ec98da34454fb32009cc44d4d2046ef8

  • SHA1

    81d383ff4b244264c4674ae1e7720224e9cbdab4

  • SHA256

    2ad43417c04584f51054406e6636018d3fbfdc3dec5cd2d4760b798c5bc7b9ff

  • SHA512

    a3dc0ac1223586c6855905fb5881e73fb0f152d63464fb0fd4598d1d6e3170a555fa892a87db0a0500d928457e9a175892a13c8e326570987ed61463a47d68d9

  • SSDEEP

    6144:IrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRw4:Ir1kuveY35YO67Wxz7w4

Score
7/10
discovery

Malware Config

Targets

    • Target

      2ad43417c04584f51054406e6636018d3fbfdc3dec5cd2d4760b798c5bc7b9ff

    • Size

      314KB

    • MD5

      ec98da34454fb32009cc44d4d2046ef8

    • SHA1

      81d383ff4b244264c4674ae1e7720224e9cbdab4

    • SHA256

      2ad43417c04584f51054406e6636018d3fbfdc3dec5cd2d4760b798c5bc7b9ff

    • SHA512

      a3dc0ac1223586c6855905fb5881e73fb0f152d63464fb0fd4598d1d6e3170a555fa892a87db0a0500d928457e9a175892a13c8e326570987ed61463a47d68d9

    • SSDEEP

      6144:IrAbUzkuvcBYC47l2xn88NEymFTYO67qzVxzRRw4:Ir1kuveY35YO67Wxz7w4

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks