Overview

overview

10

Static

static

bb6d4b6616...d1.exe

windows7-x64

10

bb6d4b6616...d1.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb6d4b6616667d1806ab8d14a564a8420cf5ab7b5ab4d28d2f67031a807eb9d1

  • Size

    196KB

  • Sample

    221123-vqdymacf2y

  • MD5

    39fdbb206b70d09e51226dd52c84e0e3

  • SHA1

    08de682415e0d3d48c08500b00397c6beaa62396

  • SHA256

    bb6d4b6616667d1806ab8d14a564a8420cf5ab7b5ab4d28d2f67031a807eb9d1

  • SHA512

    6e505d763bdadb197259ca4b75ae7dd03f384f5a01001f1ef33cda5b7f67132cd31777697126ac4ff0af3571351c33cf2d2e115e2093bd2dbcfbe045b5ddc0ef

  • SSDEEP

    6144:lXiuUPH3bX2a23NYcJQ8TfxZ85WJ007G9tSBN7+ft:liuUPH3bX2a23NYcJQ8TfxZ9J0rtSz61

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      bb6d4b6616667d1806ab8d14a564a8420cf5ab7b5ab4d28d2f67031a807eb9d1

    • Size

      196KB

    • MD5

      39fdbb206b70d09e51226dd52c84e0e3

    • SHA1

      08de682415e0d3d48c08500b00397c6beaa62396

    • SHA256

      bb6d4b6616667d1806ab8d14a564a8420cf5ab7b5ab4d28d2f67031a807eb9d1

    • SHA512

      6e505d763bdadb197259ca4b75ae7dd03f384f5a01001f1ef33cda5b7f67132cd31777697126ac4ff0af3571351c33cf2d2e115e2093bd2dbcfbe045b5ddc0ef

    • SSDEEP

      6144:lXiuUPH3bX2a23NYcJQ8TfxZ85WJ007G9tSBN7+ft:liuUPH3bX2a23NYcJQ8TfxZ9J0rtSz61

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks