Overview

overview

8

Static

static

f87314498e...c6.exe

windows7-x64

8

f87314498e...c6.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f87314498e407f9ac95f8c13d8d942ae3ec4e3fad21a3f3be2b83ceaf591b8c6

  • Size

    444KB

  • Sample

    221123-lybc2acf25

  • MD5

    83b3026498d9489934d8e58f258d1f86

  • SHA1

    8f30b5ec479a7486c468240c79aa8e2c0632d8a0

  • SHA256

    f87314498e407f9ac95f8c13d8d942ae3ec4e3fad21a3f3be2b83ceaf591b8c6

  • SHA512

    05d2c191377fb3558b1266698ea14a407408bbb2946c2bf2e2a70d6d99effe871b3413b0f793de22b3da8819401b2faf285278b83adabdc210566040c69ff1ad

  • SSDEEP

    6144:vPijNIqf0BeaXxfSp8dBLUFj5ZuMIsl5UbdG4XXU83x46f2:3iZjMTXldBLUos+BGGX/b

Score
8/10
persistence

Malware Config

Targets

    • Target

      f87314498e407f9ac95f8c13d8d942ae3ec4e3fad21a3f3be2b83ceaf591b8c6

    • Size

      444KB

    • MD5

      83b3026498d9489934d8e58f258d1f86

    • SHA1

      8f30b5ec479a7486c468240c79aa8e2c0632d8a0

    • SHA256

      f87314498e407f9ac95f8c13d8d942ae3ec4e3fad21a3f3be2b83ceaf591b8c6

    • SHA512

      05d2c191377fb3558b1266698ea14a407408bbb2946c2bf2e2a70d6d99effe871b3413b0f793de22b3da8819401b2faf285278b83adabdc210566040c69ff1ad

    • SSDEEP

      6144:vPijNIqf0BeaXxfSp8dBLUFj5ZuMIsl5UbdG4XXU83x46f2:3iZjMTXldBLUos+BGGX/b

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks