Overview

overview

8

Static

static

696efaa29a...5e.exe

windows7-x64

8

696efaa29a...5e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    696efaa29a7e3b751e074f12883ed1e00dd281641ef6878ea9ed43fb4f79af5e

  • Size

    602KB

  • Sample

    221123-mfg9ashb8x

  • MD5

    29d7bedcea35c8557097c557542c1e40

  • SHA1

    3ea4061e6b3e9bf93cd514500d62d9b4d20532e6

  • SHA256

    696efaa29a7e3b751e074f12883ed1e00dd281641ef6878ea9ed43fb4f79af5e

  • SHA512

    00f98975b6c61408b45528a1fe53af7cb4142b535374609a623d9bb9bf6264ae9651c73dedea69974bfe537fb7d2009c6eb560ff0e37e45cc9edbc1624de98e8

  • SSDEEP

    12288:LIny5DYTSIWaadfl8xTgy/jS5sq8hRdt+aNJZATz3Kg+KFkDYSrg:zUTSthuTgy/j7hjtOXKg+IkDYSrg

Score
8/10
discovery

Malware Config

Targets

    • Target

      696efaa29a7e3b751e074f12883ed1e00dd281641ef6878ea9ed43fb4f79af5e

    • Size

      602KB

    • MD5

      29d7bedcea35c8557097c557542c1e40

    • SHA1

      3ea4061e6b3e9bf93cd514500d62d9b4d20532e6

    • SHA256

      696efaa29a7e3b751e074f12883ed1e00dd281641ef6878ea9ed43fb4f79af5e

    • SHA512

      00f98975b6c61408b45528a1fe53af7cb4142b535374609a623d9bb9bf6264ae9651c73dedea69974bfe537fb7d2009c6eb560ff0e37e45cc9edbc1624de98e8

    • SSDEEP

      12288:LIny5DYTSIWaadfl8xTgy/jS5sq8hRdt+aNJZATz3Kg+KFkDYSrg:zUTSthuTgy/j7hjtOXKg+IkDYSrg

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks