Overview

overview

5

Static

static

981e232dc7...32.exe

windows7-x64

5

981e232dc7...32.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    981e232dc71e48c0f2f7cbbcd779dc419afb2cb2785bca8c57562d9821c88b32

  • Size

    1.6MB

  • Sample

    221123-na3tgsbe3v

  • MD5

    7c9e15f15ea76b934e0516c58b6a3fb1

  • SHA1

    81d02247c51fc0941b41fce46f3bf582868e41f7

  • SHA256

    981e232dc71e48c0f2f7cbbcd779dc419afb2cb2785bca8c57562d9821c88b32

  • SHA512

    552ff8034e15d58804c5c2f110cbd6088055a340ee9948e8c43de3e825a2122bb3ea5c6d122766af549121480545bc5cf592130db5987300412afa734735a3f8

  • SSDEEP

    24576:xzD5urNhRWx2Mk4JJQByw7Imlq3g495S0PwbphrpgXXOZuv/rTWeR5j4UwJZQUYJ:D6/ye0PIphrp9Zuvjqa0UidS

Score
5/10

Malware Config

Targets

    • Target

      981e232dc71e48c0f2f7cbbcd779dc419afb2cb2785bca8c57562d9821c88b32

    • Size

      1.6MB

    • MD5

      7c9e15f15ea76b934e0516c58b6a3fb1

    • SHA1

      81d02247c51fc0941b41fce46f3bf582868e41f7

    • SHA256

      981e232dc71e48c0f2f7cbbcd779dc419afb2cb2785bca8c57562d9821c88b32

    • SHA512

      552ff8034e15d58804c5c2f110cbd6088055a340ee9948e8c43de3e825a2122bb3ea5c6d122766af549121480545bc5cf592130db5987300412afa734735a3f8

    • SSDEEP

      24576:xzD5urNhRWx2Mk4JJQByw7Imlq3g495S0PwbphrpgXXOZuv/rTWeR5j4UwJZQUYJ:D6/ye0PIphrp9Zuvjqa0UidS

    Score
    5/10

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks