Overview

overview

8

Static

static

dc2d1bc3a3...22.exe

windows7-x64

8

dc2d1bc3a3...22.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc2d1bc3a3e6b136d50131df6d37d7c0eb9cf7aea2bb72cb3e5749050b249922

  • Size

    191KB

  • Sample

    221124-bhfbyacc6s

  • MD5

    1bb221e3d2d2ff13063d198c71b69013

  • SHA1

    9505301da81c28ef5ad749ec5ecfda7f8eedbc84

  • SHA256

    dc2d1bc3a3e6b136d50131df6d37d7c0eb9cf7aea2bb72cb3e5749050b249922

  • SHA512

    18ebf60812c44d6f867cc4eaa9cb03b0d3a4cf2c1e4fe1b90b5eda7e94f068e800db2ffb2ffa1e164f7f3b834db577ed30030f966c517f2c7b40ebec28dfd4f0

  • SSDEEP

    3072:2dKIOoL16fecObSCBqjEjINPqhfCAq7RgIECivX5:KKI/LAfecdPojCYbugIEPX

Score
8/10
persistence

Malware Config

Targets

    • Target

      dc2d1bc3a3e6b136d50131df6d37d7c0eb9cf7aea2bb72cb3e5749050b249922

    • Size

      191KB

    • MD5

      1bb221e3d2d2ff13063d198c71b69013

    • SHA1

      9505301da81c28ef5ad749ec5ecfda7f8eedbc84

    • SHA256

      dc2d1bc3a3e6b136d50131df6d37d7c0eb9cf7aea2bb72cb3e5749050b249922

    • SHA512

      18ebf60812c44d6f867cc4eaa9cb03b0d3a4cf2c1e4fe1b90b5eda7e94f068e800db2ffb2ffa1e164f7f3b834db577ed30030f966c517f2c7b40ebec28dfd4f0

    • SSDEEP

      3072:2dKIOoL16fecObSCBqjEjINPqhfCAq7RgIECivX5:KKI/LAfecdPojCYbugIEPX

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks