Overview

overview

10

Static

static

75f26c7eed...a1.exe

windows7-x64

10

75f26c7eed...a1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75f26c7eed7a10b4fa100afae908f7ef9c6aec74e248b547a19101fd44eff3a1

  • Size

    266KB

  • Sample

    221123-s17mksfh2z

  • MD5

    eed5db1888b8e7a5615e3c0d2281b4d1

  • SHA1

    80f4be2f8d5c75b77c67d0e9f57a857f196f5524

  • SHA256

    75f26c7eed7a10b4fa100afae908f7ef9c6aec74e248b547a19101fd44eff3a1

  • SHA512

    f1f9120017919b1f9905fb71b8e6946843b71455b63730aff4dde3584ee648737e326bd549b777396c6ad9fd2c905e195dde8cd0041e9db65b900f4bd0b7d82f

  • SSDEEP

    6144:MRAhhJxX7bNIAROzTuft84FpJmWEHacwGpBdmfEPYOvgIqPr:UsAAPF84FpJmCAd9wOvfK

Score
10/10
persistence

Malware Config

Targets

    • Target

      75f26c7eed7a10b4fa100afae908f7ef9c6aec74e248b547a19101fd44eff3a1

    • Size

      266KB

    • MD5

      eed5db1888b8e7a5615e3c0d2281b4d1

    • SHA1

      80f4be2f8d5c75b77c67d0e9f57a857f196f5524

    • SHA256

      75f26c7eed7a10b4fa100afae908f7ef9c6aec74e248b547a19101fd44eff3a1

    • SHA512

      f1f9120017919b1f9905fb71b8e6946843b71455b63730aff4dde3584ee648737e326bd549b777396c6ad9fd2c905e195dde8cd0041e9db65b900f4bd0b7d82f

    • SSDEEP

      6144:MRAhhJxX7bNIAROzTuft84FpJmWEHacwGpBdmfEPYOvgIqPr:UsAAPF84FpJmCAd9wOvfK

    Score
    10/10
    persistence

    • Modifies system executable filetype association

      persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Change Default File Association

1
T1042

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks