Overview

overview

8

Static

static

bea2a132de...f6.exe

windows7-x64

8

bea2a132de...f6.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bea2a132de41445d237dec2b187e229bb48edbdc9571ededa0220b5d59c64cf6

  • Size

    602KB

  • Sample

    221123-l9jtjsdd88

  • MD5

    7b0bd179fb09d88a6834118cd3b5cfa9

  • SHA1

    f2fcf76bd60100d398c2fa30535e76ef8ac111c3

  • SHA256

    bea2a132de41445d237dec2b187e229bb48edbdc9571ededa0220b5d59c64cf6

  • SHA512

    b13674aa435848a01673d59fdcd37cee0bf590430d4e0a88eb22b698472f8ddee438ea719cee264f0c1fdd8bd3c2315493876ad95f8ea67eb4a36ce1ded08590

  • SSDEEP

    12288:lIny5DYTu8V8xXPDh+itCaQdq/rC05LajgCCu2RvQruvEh:RUTu28xNNCa7/rpasZRvpM

Score
8/10
discovery

Malware Config

Targets

    • Target

      bea2a132de41445d237dec2b187e229bb48edbdc9571ededa0220b5d59c64cf6

    • Size

      602KB

    • MD5

      7b0bd179fb09d88a6834118cd3b5cfa9

    • SHA1

      f2fcf76bd60100d398c2fa30535e76ef8ac111c3

    • SHA256

      bea2a132de41445d237dec2b187e229bb48edbdc9571ededa0220b5d59c64cf6

    • SHA512

      b13674aa435848a01673d59fdcd37cee0bf590430d4e0a88eb22b698472f8ddee438ea719cee264f0c1fdd8bd3c2315493876ad95f8ea67eb4a36ce1ded08590

    • SSDEEP

      12288:lIny5DYTu8V8xXPDh+itCaQdq/rC05LajgCCu2RvQruvEh:RUTu28xNNCa7/rpasZRvpM

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks