Overview

overview

8

Static

static

645ff7f863...29.exe

windows7-x64

8

645ff7f863...29.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    645ff7f8634df258453d6b839affda96e5d649d172fa300b5cb627d832d54f29

  • Size

    120KB

  • Sample

    221123-m79smaga97

  • MD5

    9fe641ab9613060c0c95c1db0929278e

  • SHA1

    8f05cd15aacb9a06011c3df82c0cb70c71e007c1

  • SHA256

    645ff7f8634df258453d6b839affda96e5d649d172fa300b5cb627d832d54f29

  • SHA512

    21246f0bcb223d6cd470a0a0fec0c015406bc4a15b579ccef4d95b734212d495e0a511d51a586ca83770387a8dbc4d9b77749a694123cabc5c8fc59b1f7f22b0

  • SSDEEP

    3072:G+l80YoHbf7/BZp7qgWY01NPi9Eyo+XxtNGl:9l+c75ZpeFYOM9E+Xxnc

Score
8/10
persistence

Malware Config

Targets

    • Target

      645ff7f8634df258453d6b839affda96e5d649d172fa300b5cb627d832d54f29

    • Size

      120KB

    • MD5

      9fe641ab9613060c0c95c1db0929278e

    • SHA1

      8f05cd15aacb9a06011c3df82c0cb70c71e007c1

    • SHA256

      645ff7f8634df258453d6b839affda96e5d649d172fa300b5cb627d832d54f29

    • SHA512

      21246f0bcb223d6cd470a0a0fec0c015406bc4a15b579ccef4d95b734212d495e0a511d51a586ca83770387a8dbc4d9b77749a694123cabc5c8fc59b1f7f22b0

    • SSDEEP

      3072:G+l80YoHbf7/BZp7qgWY01NPi9Eyo+XxtNGl:9l+c75ZpeFYOM9E+Xxnc

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks