Overview

overview

9

Static

static

754d605005...06.exe

windows7-x64

9

754d605005...06.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    754d605005ccecc6c497e8dda81cc2948ef9994f881cc665872eb3634c9e0206

  • Size

    9.0MB

  • Sample

    221123-z68v6aef45

  • MD5

    41d5c6102cccfc9cba0b720356740306

  • SHA1

    95a22b78a1f88b03835eb141f58205776dc5f6c2

  • SHA256

    754d605005ccecc6c497e8dda81cc2948ef9994f881cc665872eb3634c9e0206

  • SHA512

    9e9c07a351addcbfefa56e7b5e002594073dd6162f1ca22c756f356aec99829cd6f8abddc875be70435408e20ff338baf5ce550ef3e3d110168da848b6c9ed96

  • SSDEEP

    196608:eRocF0HMnSx5SFMxgqo9KlgL/ZXtmsJN7WCDB1LJ6tTwuY:eGIeBXSAmU4t/7WC3QhY

Score
9/10
persistence

Malware Config

Targets

    • Target

      754d605005ccecc6c497e8dda81cc2948ef9994f881cc665872eb3634c9e0206

    • Size

      9.0MB

    • MD5

      41d5c6102cccfc9cba0b720356740306

    • SHA1

      95a22b78a1f88b03835eb141f58205776dc5f6c2

    • SHA256

      754d605005ccecc6c497e8dda81cc2948ef9994f881cc665872eb3634c9e0206

    • SHA512

      9e9c07a351addcbfefa56e7b5e002594073dd6162f1ca22c756f356aec99829cd6f8abddc875be70435408e20ff338baf5ce550ef3e3d110168da848b6c9ed96

    • SSDEEP

      196608:eRocF0HMnSx5SFMxgqo9KlgL/ZXtmsJN7WCDB1LJ6tTwuY:eGIeBXSAmU4t/7WC3QhY

    Score
    9/10
    persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks