Overview

overview

8

Static

static

f2a161b341...7d.exe

windows7-x64

8

f2a161b341...7d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2a161b3417f9387a3e85d017b0960f7e4076dfbd21938a97793070e5603797d

  • Size

    602KB

  • Sample

    221123-l54cdsdb79

  • MD5

    20ce4a86afb98801345f54571fb600ef

  • SHA1

    f9f0d7af5409f23b8db54a35c8592d8ba1a7fd57

  • SHA256

    f2a161b3417f9387a3e85d017b0960f7e4076dfbd21938a97793070e5603797d

  • SHA512

    cff987d494e238ff840d7be733aad4ab6107c155894e90daa32e0f3254021743029b71f15ccd77435957805a24954bb7bc9056852fe0451d40e2c89dace62c71

  • SSDEEP

    12288:NIny5DYTgG4uGWuCFKrDmw+Klil2idTJQVvC56i//+OMFGBa:ZUTgG4TCFgSwv+RpJQ+duG

Score
8/10
discovery

Malware Config

Targets

    • Target

      f2a161b3417f9387a3e85d017b0960f7e4076dfbd21938a97793070e5603797d

    • Size

      602KB

    • MD5

      20ce4a86afb98801345f54571fb600ef

    • SHA1

      f9f0d7af5409f23b8db54a35c8592d8ba1a7fd57

    • SHA256

      f2a161b3417f9387a3e85d017b0960f7e4076dfbd21938a97793070e5603797d

    • SHA512

      cff987d494e238ff840d7be733aad4ab6107c155894e90daa32e0f3254021743029b71f15ccd77435957805a24954bb7bc9056852fe0451d40e2c89dace62c71

    • SSDEEP

      12288:NIny5DYTgG4uGWuCFKrDmw+Klil2idTJQVvC56i//+OMFGBa:ZUTgG4TCFgSwv+RpJQ+duG

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks