Overview

overview

6

Static

static

8d1dcf57fb...24.exe

windows7-x64

6

8d1dcf57fb...24.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d1dcf57fb460b0cf84b594c9d1f69dae46d80d0c86dd6f1cfabe648c4314024

  • Size

    123KB

  • Sample

    221123-qzt9raac91

  • MD5

    ccf3daf42a7b1e0d1c6769b8d6d2abb9

  • SHA1

    12e637c327644cc59c969c74fde5ed3060dcd6d3

  • SHA256

    8d1dcf57fb460b0cf84b594c9d1f69dae46d80d0c86dd6f1cfabe648c4314024

  • SHA512

    820a445538123cf8201c2ac491a925d362f6cd9bcc91225524412363d1b7fc1b113ee8be020f4bdbe7086a31076b03e2a2a3d27a48c535c6882b07682b37df28

  • SSDEEP

    3072:YU6G6LQjmAdnyuFIZyE1XRrTehAqXANWqh1EdtG7D:YU658n7aZyE1Xt0X8Wqhe2

Score
6/10
persistence

Malware Config

Targets

    • Target

      8d1dcf57fb460b0cf84b594c9d1f69dae46d80d0c86dd6f1cfabe648c4314024

    • Size

      123KB

    • MD5

      ccf3daf42a7b1e0d1c6769b8d6d2abb9

    • SHA1

      12e637c327644cc59c969c74fde5ed3060dcd6d3

    • SHA256

      8d1dcf57fb460b0cf84b594c9d1f69dae46d80d0c86dd6f1cfabe648c4314024

    • SHA512

      820a445538123cf8201c2ac491a925d362f6cd9bcc91225524412363d1b7fc1b113ee8be020f4bdbe7086a31076b03e2a2a3d27a48c535c6882b07682b37df28

    • SSDEEP

      3072:YU6G6LQjmAdnyuFIZyE1XRrTehAqXANWqh1EdtG7D:YU658n7aZyE1Xt0X8Wqhe2

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Checks for any installed AV software in registry

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Security Software Discovery

1
T1063

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks