Overview

overview

8

Static

static

de4f2d67c3...6d.exe

windows7-x64

8

de4f2d67c3...6d.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de4f2d67c3525ed4e29d10493472ae11575196f78876ff5698388573eeeade6d

  • Size

    938KB

  • Sample

    221124-f1jjjaee6y

  • MD5

    1940c4f5b0c39d5c9042b5c144ecfcbf

  • SHA1

    0f8b84e61f9cf85c031a1091c87700f510d49ffc

  • SHA256

    de4f2d67c3525ed4e29d10493472ae11575196f78876ff5698388573eeeade6d

  • SHA512

    105e5f76ff43bad4ede1ea5c7bd66344429b351ff781966c299022c81d5343978e2a2bb0605adba4a405db7c55cf4ef50db4702d2df4e1019405ad20f3fcf5d9

  • SSDEEP

    24576:WGW5229MFfc9rTuiqoZQO6q25XOTnFRsyYMzqZ:WGW52DfoTWo2h35XOTmRZ

Score
8/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      de4f2d67c3525ed4e29d10493472ae11575196f78876ff5698388573eeeade6d

    • Size

      938KB

    • MD5

      1940c4f5b0c39d5c9042b5c144ecfcbf

    • SHA1

      0f8b84e61f9cf85c031a1091c87700f510d49ffc

    • SHA256

      de4f2d67c3525ed4e29d10493472ae11575196f78876ff5698388573eeeade6d

    • SHA512

      105e5f76ff43bad4ede1ea5c7bd66344429b351ff781966c299022c81d5343978e2a2bb0605adba4a405db7c55cf4ef50db4702d2df4e1019405ad20f3fcf5d9

    • SSDEEP

      24576:WGW5229MFfc9rTuiqoZQO6q25XOTnFRsyYMzqZ:WGW52DfoTWo2h35XOTmRZ

    Score
    8/10
    discoveryevasionpersistencetrojan

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks