Overview

overview

8

Static

static

c88994693b...93.exe

windows7-x64

8

c88994693b...93.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c88994693b590c8bcedcb9707a4b4e059fc042f596fda2a91c88bdaa0c494893

  • Size

    200KB

  • Sample

    221124-blympace8y

  • MD5

    083d6badb0fd9529f2bcd3f713ee4a80

  • SHA1

    89c179167c89181d3914a8977e4aef4ff86cbe82

  • SHA256

    c88994693b590c8bcedcb9707a4b4e059fc042f596fda2a91c88bdaa0c494893

  • SHA512

    8ed6a4d6bd43fd49c6f53343e2247686061cc26ab2a56a32b7b69c99433856cbd3ec143a41df92ba12d0a65409ead54c67658c3189fe8c033ab5b3d0ac0f3c02

  • SSDEEP

    3072:bfkwPceV2ol9xU1TA5ZwZ9zKbc4OVHUmhHZIwZ+K:bswPDVjyM5ZwZMbc4OV0mhHz

Score
8/10
persistence

Malware Config

Targets

    • Target

      c88994693b590c8bcedcb9707a4b4e059fc042f596fda2a91c88bdaa0c494893

    • Size

      200KB

    • MD5

      083d6badb0fd9529f2bcd3f713ee4a80

    • SHA1

      89c179167c89181d3914a8977e4aef4ff86cbe82

    • SHA256

      c88994693b590c8bcedcb9707a4b4e059fc042f596fda2a91c88bdaa0c494893

    • SHA512

      8ed6a4d6bd43fd49c6f53343e2247686061cc26ab2a56a32b7b69c99433856cbd3ec143a41df92ba12d0a65409ead54c67658c3189fe8c033ab5b3d0ac0f3c02

    • SSDEEP

      3072:bfkwPceV2ol9xU1TA5ZwZ9zKbc4OVHUmhHZIwZ+K:bswPDVjyM5ZwZMbc4OV0mhHz

    Score
    8/10
    persistence

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks