Overview

overview

8

Static

static

0e13052059...35.exe

windows7-x64

8

0e13052059...35.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e13052059af0f5b12570e98fbaa755a5b622acc468a1099df6e12eca664dc35

  • Size

    603KB

  • Sample

    221123-mlzqjaed56

  • MD5

    3b84512212be93317a89dfd5743f5639

  • SHA1

    0edece75491f75123d60167dad50f91061e3ee55

  • SHA256

    0e13052059af0f5b12570e98fbaa755a5b622acc468a1099df6e12eca664dc35

  • SHA512

    a1e081470ca04997c21631378c97058121dab9ce85633543ec94b26768ef917952646254d2aa9b55be0cef6f88a7835a74a71af4736f50ae070e4d1cbefb0f3f

  • SSDEEP

    12288:PIny5DYTfIERZtXuuSYMJmtOplR9g6SFVry9ukQz4MkiU:XUTfLluYMEMpDSnBjUMkiU

Score
8/10
discovery

Malware Config

Targets

    • Target

      0e13052059af0f5b12570e98fbaa755a5b622acc468a1099df6e12eca664dc35

    • Size

      603KB

    • MD5

      3b84512212be93317a89dfd5743f5639

    • SHA1

      0edece75491f75123d60167dad50f91061e3ee55

    • SHA256

      0e13052059af0f5b12570e98fbaa755a5b622acc468a1099df6e12eca664dc35

    • SHA512

      a1e081470ca04997c21631378c97058121dab9ce85633543ec94b26768ef917952646254d2aa9b55be0cef6f88a7835a74a71af4736f50ae070e4d1cbefb0f3f

    • SSDEEP

      12288:PIny5DYTfIERZtXuuSYMJmtOplR9g6SFVry9ukQz4MkiU:XUTfLluYMEMpDSnBjUMkiU

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks