Overview

overview

8

Static

static

67f022d2e0...35.exe

windows7-x64

8

67f022d2e0...35.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67f022d2e02a41e685aef6d1ab4abfcb91286fb157c47de85f9dc973d9cf5c35

  • Size

    139KB

  • Sample

    221123-s52xwsdb47

  • MD5

    d1953176c75554cde4565d5a41650c61

  • SHA1

    982a321d3f4ab6c8ca657719bcd265e6761e1cd3

  • SHA256

    67f022d2e02a41e685aef6d1ab4abfcb91286fb157c47de85f9dc973d9cf5c35

  • SHA512

    85922ba0f4001f3cebd9f35ee2ad0548c5f5fd0ee2a6d0b07a8420c6adbeed71b5745faf5127232a17c936fea7863046b633477272d74bf8a2e3ec28137248f2

  • SSDEEP

    3072:4KYHzAuzeCeW51ThnftcwaSOfepQo8whnOKexYy6zgF2:hC0CeWTZeMOO8w1OazgF2

Score
8/10
evasion

Malware Config

Targets

    • Target

      67f022d2e02a41e685aef6d1ab4abfcb91286fb157c47de85f9dc973d9cf5c35

    • Size

      139KB

    • MD5

      d1953176c75554cde4565d5a41650c61

    • SHA1

      982a321d3f4ab6c8ca657719bcd265e6761e1cd3

    • SHA256

      67f022d2e02a41e685aef6d1ab4abfcb91286fb157c47de85f9dc973d9cf5c35

    • SHA512

      85922ba0f4001f3cebd9f35ee2ad0548c5f5fd0ee2a6d0b07a8420c6adbeed71b5745faf5127232a17c936fea7863046b633477272d74bf8a2e3ec28137248f2

    • SSDEEP

      3072:4KYHzAuzeCeW51ThnftcwaSOfepQo8whnOKexYy6zgF2:hC0CeWTZeMOO8w1OazgF2

    Score
    8/10
    evasion

    • Executes dropped EXE

    • Looks for VMWare Tools registry key

      evasion

    • Deletes itself

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Query Registry

1
T1012

Virtualization/Sandbox Evasion

1
T1497

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks