Overview

overview

8

Static

static

book-298371.exe

windows7-x64

8

book-298371.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7022f5bde9bd07293c3605608308c340c13373404276af93b282979ea3f1424

  • Size

    68KB

  • Sample

    221123-s8m8xadc79

  • MD5

    06864a461f5d34e0a9c6bab779b615a8

  • SHA1

    93c2220010d5c74b4511f201978622832eafb51e

  • SHA256

    d7022f5bde9bd07293c3605608308c340c13373404276af93b282979ea3f1424

  • SHA512

    923df2b00b8576b3674f273054d9c2843f7901b79ebc22f680d81f67d8ff3ad830da0403fd046b66bcd2d60190364671be566e12ae369ae2bbd1202a46980a69

  • SSDEEP

    1536:xXWDakY7Z2BlDuluhcINdDm/c11jWUIpnqDa4iq:xmD/IZ2pcINpm/c11CVrbq

Score
8/10
persistence

Malware Config

Targets

    • Target

      book-298371.exe

    • Size

      116KB

    • MD5

      aba53a493de62f3bbd17f14d73fcc461

    • SHA1

      fc6f4ce93a8e18da6e58d0c8ce1c7186f4bdf352

    • SHA256

      923bc504187aa43c28a00615b86b36255b2730142f7392f54849f91885876e6c

    • SHA512

      bd80dba344ab807b8b40f5dfaa50856db5f9a6f4fb0c8794995e92198f25f1e76eee24dead645b7f1afe2f2258dbe0f5e2f5620586ad887f912be0d53d9e078c

    • SSDEEP

      3072:IthOHk1wxL2Ms37bJISjhFdtxthzNV50Vo:Xk1wZ2MQuChFdf90

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks