Overview

overview

8

Static

static

1

b0c4198f75...53.exe

windows7-x64

7

b0c4198f75...53.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0c4198f75a8a65343d7df40ce57e6fdd5e3be6697071096de1fc7baf1e39553

  • Size

    231KB

  • Sample

    221123-m5rh9sba5t

  • MD5

    65d35484f0436ab43af5f193f73d79ca

  • SHA1

    63cc0acc9269bd3931391440dbdd0ca451e56e08

  • SHA256

    b0c4198f75a8a65343d7df40ce57e6fdd5e3be6697071096de1fc7baf1e39553

  • SHA512

    358f55c773aa8d8aa1b0ffbe6cb5379842daaafaf43438c2f4b0ec3e2d461e216b7ba4b7e6f364d523dd4fd6dc519d488befd4cd5fc33f1178a71e8efd4f0224

  • SSDEEP

    6144:feTeM/LzLKyM6VHrURILI8ZNnIDREgDiLSJ6oy:DMHGyMAHrvI8ZCu2goy

Score
8/10
persistence

Malware Config

Targets

    • Target

      b0c4198f75a8a65343d7df40ce57e6fdd5e3be6697071096de1fc7baf1e39553

    • Size

      231KB

    • MD5

      65d35484f0436ab43af5f193f73d79ca

    • SHA1

      63cc0acc9269bd3931391440dbdd0ca451e56e08

    • SHA256

      b0c4198f75a8a65343d7df40ce57e6fdd5e3be6697071096de1fc7baf1e39553

    • SHA512

      358f55c773aa8d8aa1b0ffbe6cb5379842daaafaf43438c2f4b0ec3e2d461e216b7ba4b7e6f364d523dd4fd6dc519d488befd4cd5fc33f1178a71e8efd4f0224

    • SSDEEP

      6144:feTeM/LzLKyM6VHrURILI8ZNnIDREgDiLSJ6oy:DMHGyMAHrvI8ZCu2goy

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks