Overview

overview

8

Static

static

70ea4ddafb...3e.exe

windows7-x64

8

70ea4ddafb...3e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70ea4ddafb20fd85c573ef5d93910eb490ca9d9f814b56004f20eff94480123e

  • Size

    601KB

  • Sample

    221123-me3hvadh83

  • MD5

    ee8d8e999736ef19869c7edfded0c7fe

  • SHA1

    287e6bdfe569362e317318dcf53379ce9de6e929

  • SHA256

    70ea4ddafb20fd85c573ef5d93910eb490ca9d9f814b56004f20eff94480123e

  • SHA512

    0dbcc114ce46da6c0111de47855c2fa0cc70cfb76c3761fa697e4c6fb80c523aadb5cbbf3467eaa4584a6d5a1dd1e0e73ca9e1168ca22712d98330d722965bbb

  • SSDEEP

    12288:PIny5DYTPI6Ci3uwWfrlASONWvXTKNqpTlosrsTiw7yQrf:XUTPFCJTlASO2mNwSmc7rf

Score
8/10
discovery

Malware Config

Targets

    • Target

      70ea4ddafb20fd85c573ef5d93910eb490ca9d9f814b56004f20eff94480123e

    • Size

      601KB

    • MD5

      ee8d8e999736ef19869c7edfded0c7fe

    • SHA1

      287e6bdfe569362e317318dcf53379ce9de6e929

    • SHA256

      70ea4ddafb20fd85c573ef5d93910eb490ca9d9f814b56004f20eff94480123e

    • SHA512

      0dbcc114ce46da6c0111de47855c2fa0cc70cfb76c3761fa697e4c6fb80c523aadb5cbbf3467eaa4584a6d5a1dd1e0e73ca9e1168ca22712d98330d722965bbb

    • SSDEEP

      12288:PIny5DYTPI6Ci3uwWfrlASONWvXTKNqpTlosrsTiw7yQrf:XUTPFCJTlASO2mNwSmc7rf

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks