Overview

overview

8

Static

static

a3399f2edb...b8.exe

windows7-x64

8

a3399f2edb...b8.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3399f2edb5eb44e527a123daf8727feeaf5a34294e764d1516de6deba19e6b8

  • Size

    601KB

  • Sample

    221123-mbemlsgh4z

  • MD5

    088e1f55183e4774440312f46f1e7251

  • SHA1

    5f1483c9ec076ec794dd29cae4532003535dd9bc

  • SHA256

    a3399f2edb5eb44e527a123daf8727feeaf5a34294e764d1516de6deba19e6b8

  • SHA512

    b4fe76c9c2513eed1a3582605f353753cb5f5698f0d2a569889e5cc7717cac2b490a0b8de00a3f48bf70d50a6fd28923584cb8301472b3ea9ef47de56f55b817

  • SSDEEP

    12288:IIny5DYTSIDe+zPyTPLK7UV2CPUkKR+iNEkZNTGZmspkTJ:GUTSweY2LK7UzKRfEcqpc

Score
8/10
discovery

Malware Config

Targets

    • Target

      a3399f2edb5eb44e527a123daf8727feeaf5a34294e764d1516de6deba19e6b8

    • Size

      601KB

    • MD5

      088e1f55183e4774440312f46f1e7251

    • SHA1

      5f1483c9ec076ec794dd29cae4532003535dd9bc

    • SHA256

      a3399f2edb5eb44e527a123daf8727feeaf5a34294e764d1516de6deba19e6b8

    • SHA512

      b4fe76c9c2513eed1a3582605f353753cb5f5698f0d2a569889e5cc7717cac2b490a0b8de00a3f48bf70d50a6fd28923584cb8301472b3ea9ef47de56f55b817

    • SSDEEP

      12288:IIny5DYTSIDe+zPyTPLK7UV2CPUkKR+iNEkZNTGZmspkTJ:GUTSweY2LK7UzKRfEcqpc

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks