Overview

overview

10

Static

static

634af9cbec...d0.exe

windows7-x64

10

634af9cbec...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    634af9cbec62a0392ffb361e32376dfd80004477ae2c3b6ba00c723b8c6d6fd0

  • Size

    504KB

  • Sample

    221123-s2ctlafh3y

  • MD5

    5dfe8b3ec6c3f8e14d0e7f16c24f3193

  • SHA1

    7742927dfb82f7f41d06070710b00a0e2c4f93b0

  • SHA256

    634af9cbec62a0392ffb361e32376dfd80004477ae2c3b6ba00c723b8c6d6fd0

  • SHA512

    55b7740deee5cac9a0b343df6e7630f8cffd1eab297168619f0979fa4565f010c63e8217a453d2687c5e6110172472afd43f0ffd12c71c1d22a113eedc1e8dac

  • SSDEEP

    12288:UsAL/WUv0cSGx8Qv/6h/45cdMhcj8U2sewNuXNNoFX5R:UsW/Wg0c7xm4C443LbuXNGx5R

Score
10/10
persistence

Malware Config

Targets

    • Target

      634af9cbec62a0392ffb361e32376dfd80004477ae2c3b6ba00c723b8c6d6fd0

    • Size

      504KB

    • MD5

      5dfe8b3ec6c3f8e14d0e7f16c24f3193

    • SHA1

      7742927dfb82f7f41d06070710b00a0e2c4f93b0

    • SHA256

      634af9cbec62a0392ffb361e32376dfd80004477ae2c3b6ba00c723b8c6d6fd0

    • SHA512

      55b7740deee5cac9a0b343df6e7630f8cffd1eab297168619f0979fa4565f010c63e8217a453d2687c5e6110172472afd43f0ffd12c71c1d22a113eedc1e8dac

    • SSDEEP

      12288:UsAL/WUv0cSGx8Qv/6h/45cdMhcj8U2sewNuXNNoFX5R:UsW/Wg0c7xm4C443LbuXNGx5R

    Score
    10/10
    persistence

    • Modifies system executable filetype association

      persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Change Default File Association

1
T1042

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks