Overview

overview

10

Static

static

314867a415...af.exe

windows7-x64

10

314867a415...af.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    314867a415704b50c2d4d29c2d0feae6e821de7a668099f42ffa820d87fe7eaf

  • Size

    609KB

  • Sample

    221123-s2ps6afh5z

  • MD5

    6e117c257d557128b5204ae7b607851b

  • SHA1

    eec7cac30807765166fa5925ff62026f5284874b

  • SHA256

    314867a415704b50c2d4d29c2d0feae6e821de7a668099f42ffa820d87fe7eaf

  • SHA512

    aaf93802518b9791c241fb6022fbb39008f2df3c28835e3bea984329b51ff6283f560e11857e5b100c62166bea7890828082068333c63c08abf82627e3272143

  • SSDEEP

    12288:UsAL/W5L/SZdSCvTF+bDTqXTa7vuJhUauiAzDTbrwdtZZiSXSmbrfrOe4:UsW/WNSZ8CLGETfJma6ziteE5brf8

Score
10/10
persistence

Malware Config

Targets

    • Target

      314867a415704b50c2d4d29c2d0feae6e821de7a668099f42ffa820d87fe7eaf

    • Size

      609KB

    • MD5

      6e117c257d557128b5204ae7b607851b

    • SHA1

      eec7cac30807765166fa5925ff62026f5284874b

    • SHA256

      314867a415704b50c2d4d29c2d0feae6e821de7a668099f42ffa820d87fe7eaf

    • SHA512

      aaf93802518b9791c241fb6022fbb39008f2df3c28835e3bea984329b51ff6283f560e11857e5b100c62166bea7890828082068333c63c08abf82627e3272143

    • SSDEEP

      12288:UsAL/W5L/SZdSCvTF+bDTqXTa7vuJhUauiAzDTbrwdtZZiSXSmbrfrOe4:UsW/WNSZ8CLGETfJma6ziteE5brf8

    Score
    10/10
    persistence

    • Modifies system executable filetype association

      persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Change Default File Association

1
T1042

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks