Overview

overview

8

Static

static

0aa2f00750...2d.exe

windows7-x64

8

0aa2f00750...2d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0aa2f007501db23aa0bdf2d6ce2e7be5b163661d198a2e169815b398870f3a2d

  • Size

    602KB

  • Sample

    221123-ml8y7shf7v

  • MD5

    2cb58bcf73308f9c7f30f7dde2cbdf04

  • SHA1

    a97ae0fd1ee840e5ac5a76d9e7a5e01725480bf9

  • SHA256

    0aa2f007501db23aa0bdf2d6ce2e7be5b163661d198a2e169815b398870f3a2d

  • SHA512

    090e25114f75e0f3b41b7e8a2f0d952b8523e166441bf05f39dce76a69b3374da59689addad5a8fabcf166db454ce6f5b3ca45faa7e3fddb2f4e8f73e7db2312

  • SSDEEP

    12288:dIny5DYTlzZWJQYZPZD7gYYDglz2O1ApqGU8gZRb9MoqX+Z:JUT5ZWJQYZPZ/gXg92AANgb5hqX+

Score
8/10
discovery

Malware Config

Targets

    • Target

      0aa2f007501db23aa0bdf2d6ce2e7be5b163661d198a2e169815b398870f3a2d

    • Size

      602KB

    • MD5

      2cb58bcf73308f9c7f30f7dde2cbdf04

    • SHA1

      a97ae0fd1ee840e5ac5a76d9e7a5e01725480bf9

    • SHA256

      0aa2f007501db23aa0bdf2d6ce2e7be5b163661d198a2e169815b398870f3a2d

    • SHA512

      090e25114f75e0f3b41b7e8a2f0d952b8523e166441bf05f39dce76a69b3374da59689addad5a8fabcf166db454ce6f5b3ca45faa7e3fddb2f4e8f73e7db2312

    • SSDEEP

      12288:dIny5DYTlzZWJQYZPZD7gYYDglz2O1ApqGU8gZRb9MoqX+Z:JUT5ZWJQYZPZ/gXg92AANgb5hqX+

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks