Overview

overview

8

Static

static

f0b3fa7def...e1.exe

windows7-x64

8

f0b3fa7def...e1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f0b3fa7def9c4e34fd711d5f82bee8a252eb2e49bb2a032e3ebbf0a0ce45e4e1

  • Size

    131KB

  • Sample

    221123-na27ysbe3t

  • MD5

    40ac16daa9c2f2b8f82b036938b2412a

  • SHA1

    0cc85169d156bd25dab370a2f1bf712f3164ab49

  • SHA256

    f0b3fa7def9c4e34fd711d5f82bee8a252eb2e49bb2a032e3ebbf0a0ce45e4e1

  • SHA512

    5cb7918fb1132a8c45dddbdc65db3d8b1fd2db5a3f95f2b208271c5efbbb40f7509c2c248a5ae49c3c8f9be3b4d95fe64437898a12119cf0c3a3be8f57bd4f84

  • SSDEEP

    3072:lEH+GiEs2SMylNOjyFbxJa5emEIr9E9njkKr3McVmySRyE6Uiowf5:lsehzRFW9rC5vV/SRS

Score
8/10
persistence

Malware Config

Targets

    • Target

      f0b3fa7def9c4e34fd711d5f82bee8a252eb2e49bb2a032e3ebbf0a0ce45e4e1

    • Size

      131KB

    • MD5

      40ac16daa9c2f2b8f82b036938b2412a

    • SHA1

      0cc85169d156bd25dab370a2f1bf712f3164ab49

    • SHA256

      f0b3fa7def9c4e34fd711d5f82bee8a252eb2e49bb2a032e3ebbf0a0ce45e4e1

    • SHA512

      5cb7918fb1132a8c45dddbdc65db3d8b1fd2db5a3f95f2b208271c5efbbb40f7509c2c248a5ae49c3c8f9be3b4d95fe64437898a12119cf0c3a3be8f57bd4f84

    • SSDEEP

      3072:lEH+GiEs2SMylNOjyFbxJa5emEIr9E9njkKr3McVmySRyE6Uiowf5:lsehzRFW9rC5vV/SRS

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks