Overview

overview

8

Static

static

5a303c430f...d9.exe

windows7-x64

8

5a303c430f...d9.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a303c430f2117c2620256d209d9a7d9b3b68b7b175e0faed690d86c0cb1c4d9

  • Size

    603KB

  • Sample

    221123-mf8q9aea58

  • MD5

    8d10663d7d977a98cdb9a8db50d87f91

  • SHA1

    72b9834fc801f3872f9185349da9c7ed7109ce27

  • SHA256

    5a303c430f2117c2620256d209d9a7d9b3b68b7b175e0faed690d86c0cb1c4d9

  • SHA512

    5c1f5abd5699adbded7a11eba0ce6a6482ca994c79ed5478d9de70b9add7d519b65a8a9bbb4e6b93148d07fddc063413985a987b9b1bd3ad12931f9caf75869f

  • SSDEEP

    12288:zIny5DYTVOIpSO0bQ44n0k5j1T+ppiNy6mutBhURKCrnQp6Cskf/4mI:bUTVnV0bOf1aONjBhURKCUp6CskX4B

Score
8/10
discovery

Malware Config

Targets

    • Target

      5a303c430f2117c2620256d209d9a7d9b3b68b7b175e0faed690d86c0cb1c4d9

    • Size

      603KB

    • MD5

      8d10663d7d977a98cdb9a8db50d87f91

    • SHA1

      72b9834fc801f3872f9185349da9c7ed7109ce27

    • SHA256

      5a303c430f2117c2620256d209d9a7d9b3b68b7b175e0faed690d86c0cb1c4d9

    • SHA512

      5c1f5abd5699adbded7a11eba0ce6a6482ca994c79ed5478d9de70b9add7d519b65a8a9bbb4e6b93148d07fddc063413985a987b9b1bd3ad12931f9caf75869f

    • SSDEEP

      12288:zIny5DYTVOIpSO0bQ44n0k5j1T+ppiNy6mutBhURKCrnQp6Cskf/4mI:bUTVnV0bOf1aONjBhURKCUp6CskX4B

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks