Overview

overview

8

Static

static

c6eea3a715...3b.exe

windows7-x64

8

c6eea3a715...3b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6eea3a715e7b473b5a62e3f9d1a392029fe4056dd8fe754d9b6309e3391b63b

  • Size

    603KB

  • Sample

    221123-l8vjnagf9x

  • MD5

    d875e62f588e3a008a6dac928809a519

  • SHA1

    d786889d6cca8b0c7fc9c58925feba3fe905b6ee

  • SHA256

    c6eea3a715e7b473b5a62e3f9d1a392029fe4056dd8fe754d9b6309e3391b63b

  • SHA512

    41052fcd3f286357e924e75078f96d0ccc3b7adbedf8ecdebe18e0c8888fc42c7e94dc194d9875619d46067b8d5fe03eb978e3e86564ab44ab8a5094a684485f

  • SSDEEP

    12288:YIny5DYTfIc/Azir3SBjM/tZf0ieNTMu2wn4M/a6E6JxvwmO7IM:2UTfPkir3SjMlhGNTRbBC6EQ6X

Score
8/10
discovery

Malware Config

Targets

    • Target

      c6eea3a715e7b473b5a62e3f9d1a392029fe4056dd8fe754d9b6309e3391b63b

    • Size

      603KB

    • MD5

      d875e62f588e3a008a6dac928809a519

    • SHA1

      d786889d6cca8b0c7fc9c58925feba3fe905b6ee

    • SHA256

      c6eea3a715e7b473b5a62e3f9d1a392029fe4056dd8fe754d9b6309e3391b63b

    • SHA512

      41052fcd3f286357e924e75078f96d0ccc3b7adbedf8ecdebe18e0c8888fc42c7e94dc194d9875619d46067b8d5fe03eb978e3e86564ab44ab8a5094a684485f

    • SSDEEP

      12288:YIny5DYTfIc/Azir3SBjM/tZf0ieNTMu2wn4M/a6E6JxvwmO7IM:2UTfPkir3SjMlhGNTRbBC6EQ6X

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks