Overview

overview

7

Static

static

2014_11tra...07.exe

windows7-x64

7

2014_11tra...07.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf47088c40eb00e826c36cb1ef3fd59fe1e20f3bc292ec0c30a2b8ed948e909f

  • Size

    207KB

  • Sample

    221124-qrqxcsbb3t

  • MD5

    a9e40ecd76bd0b2cdc985fc4bfcc11d4

  • SHA1

    f02c3c32094760c71ceafac6f1fc82187913ce0a

  • SHA256

    cf47088c40eb00e826c36cb1ef3fd59fe1e20f3bc292ec0c30a2b8ed948e909f

  • SHA512

    de22f1fd4c0f4ebd1ee5fc0f31ffb693058233bb3090c46cb0578e2e7f9b3c16dd32aba1c20cdf61ec8bc8c23e81d4dea9f92a09ecdd9fe4b497908463e0782a

  • SSDEEP

    6144:h2Np1EfupWhZNaR0NOl2QTVK60RtEm+j6Fv9Z:h2Nj4hZNa6Nzmc60nh9

Score
7/10
persistence

Malware Config

Targets

    • Target

      2014_11transaktions_pdf_000093378_2014_0000919_11_v_00028836_n_827100007.exe

    • Size

      277KB

    • MD5

      07f800cbb4053497d25bc4211bdd1c39

    • SHA1

      134f73a6c5e9c494b0261a62955f866364ddeda5

    • SHA256

      b3744982a1529ee0e2a3f0df355304b7ccbaff83b7e8ffffd505b61d2d234107

    • SHA512

      f5fcc7124c3fa5486b6381db5442181794d461cf868876f0e2059b4701cda57c92a20b25e86b4db8798727eb45fda5e5458e269fa874e6ab51842d51bf33bdaf

    • SSDEEP

      6144:xscYiaYUpwXV9RIKWn/TUVs8oL48N8lqFzc+tRJShtQ:2cgzXrN8UbtPShO

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks