Overview

overview

8

Static

static

9ebde8fee9...59.exe

windows7-x64

8

9ebde8fee9...59.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ebde8fee95c7b1cc5043a5b51d74b3b2f3d5ca2aaa16e1b864fcc7eac4dc059

  • Size

    307KB

  • Sample

    221124-1ehqbsba73

  • MD5

    e3cc4251a188d7bc00ded28895883604

  • SHA1

    6036d50f20cdc1e0fd23a2889296a57e73741d5f

  • SHA256

    9ebde8fee95c7b1cc5043a5b51d74b3b2f3d5ca2aaa16e1b864fcc7eac4dc059

  • SHA512

    e03de47ab361f79fb3df8367e2f8bedd8eeaf7ee1a1f64d3fbf42e570884e98ab389d4e9230af1fe8ea8b2a2001d98f87bb69fd258c4fee6ee55e47f944b1599

  • SSDEEP

    6144:9BlQ7saOC2fD0q48m6EXuKMvV8NKitvF9HYUbbF2:9BlQfl2fQqrKXtvF9f2

Score
8/10
persistence

Malware Config

Targets

    • Target

      9ebde8fee95c7b1cc5043a5b51d74b3b2f3d5ca2aaa16e1b864fcc7eac4dc059

    • Size

      307KB

    • MD5

      e3cc4251a188d7bc00ded28895883604

    • SHA1

      6036d50f20cdc1e0fd23a2889296a57e73741d5f

    • SHA256

      9ebde8fee95c7b1cc5043a5b51d74b3b2f3d5ca2aaa16e1b864fcc7eac4dc059

    • SHA512

      e03de47ab361f79fb3df8367e2f8bedd8eeaf7ee1a1f64d3fbf42e570884e98ab389d4e9230af1fe8ea8b2a2001d98f87bb69fd258c4fee6ee55e47f944b1599

    • SSDEEP

      6144:9BlQ7saOC2fD0q48m6EXuKMvV8NKitvF9HYUbbF2:9BlQfl2fQqrKXtvF9f2

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks