Overview

overview

7

Static

static

SecuriteIn...13.exe

windows7-x64

6

SecuriteIn...13.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.IL.Trojan.MSILZilla.24344.9265.25013.exe

  • Size

    2.3MB

  • Sample

    221124-lg32qaeb38

  • MD5

    5db67f4cf4d3c7d5070c5052dc96b044

  • SHA1

    a2fcb22f476b1b10bf9ae9c9aa464a40ecbefcb7

  • SHA256

    51303a3cb940ee46abb13f86445224f6fc986d93956c15bf11d6c126d79a5d23

  • SHA512

    3bc7afddd99bb757a4702f3d69f277b84c6444e15288183ccab3131e50b442d52f0190a09c848f640f234909e96652edcc0cd3072c4269abeb442bed9bebec7d

  • SSDEEP

    49152:rw4VeQ4VMG8V71Tuo8y49qr955RlJ8Fg0EiL/U3CLbQTbCl+az+Be5Y:rJeVMGc71Tuo8y49qrb5RlJKEUfwvu+e

Score
7/10
persistence

Malware Config

Targets

    • Target

      SecuriteInfo.com.IL.Trojan.MSILZilla.24344.9265.25013.exe

    • Size

      2.3MB

    • MD5

      5db67f4cf4d3c7d5070c5052dc96b044

    • SHA1

      a2fcb22f476b1b10bf9ae9c9aa464a40ecbefcb7

    • SHA256

      51303a3cb940ee46abb13f86445224f6fc986d93956c15bf11d6c126d79a5d23

    • SHA512

      3bc7afddd99bb757a4702f3d69f277b84c6444e15288183ccab3131e50b442d52f0190a09c848f640f234909e96652edcc0cd3072c4269abeb442bed9bebec7d

    • SSDEEP

      49152:rw4VeQ4VMG8V71Tuo8y49qr955RlJ8Fg0EiL/U3CLbQTbCl+az+Be5Y:rJeVMGc71Tuo8y49qrb5RlJKEUfwvu+e

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks