Overview

overview

6

Static

static

32add1ddc9...f4.exe

windows7-x64

6

32add1ddc9...f4.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32add1ddc96f956cec62987a42a6c6a96b7350ca5b7eb1df5300ed3a814131f4

  • Size

    121KB

  • Sample

    221123-rz33bsch6x

  • MD5

    f02633349374209a5974f5095add5f46

  • SHA1

    fcdf35cb967f3bf96b2cc99e4a8deb0874853ff5

  • SHA256

    32add1ddc96f956cec62987a42a6c6a96b7350ca5b7eb1df5300ed3a814131f4

  • SHA512

    0db27919d9fa02f73297a515b8bc3577fc1975c679a5da598eac2959a647c2bd64b75fa5b1c2ef7a86fad57c044170116099bb8024ebf2805d17d0700d0f66dd

  • SSDEEP

    3072:9X3ujCPlXF/mIUJhuyuiAZfyWD5w63aFxsJ:d5lXB56WDqxK

Score
6/10
persistence

Malware Config

Targets

    • Target

      32add1ddc96f956cec62987a42a6c6a96b7350ca5b7eb1df5300ed3a814131f4

    • Size

      121KB

    • MD5

      f02633349374209a5974f5095add5f46

    • SHA1

      fcdf35cb967f3bf96b2cc99e4a8deb0874853ff5

    • SHA256

      32add1ddc96f956cec62987a42a6c6a96b7350ca5b7eb1df5300ed3a814131f4

    • SHA512

      0db27919d9fa02f73297a515b8bc3577fc1975c679a5da598eac2959a647c2bd64b75fa5b1c2ef7a86fad57c044170116099bb8024ebf2805d17d0700d0f66dd

    • SSDEEP

      3072:9X3ujCPlXF/mIUJhuyuiAZfyWD5w63aFxsJ:d5lXB56WDqxK

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks