Overview

overview

10

Static

static

campaign_3...ee7.7z

windows7-x64

3

campaign_3...ee7.7z

windows10-2004-x64

10

Resubmissions

25-11-2022 23:32

221125-3h9z4aeg73 1

25-11-2022 23:11

221125-259r6sgg3z 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    campaign_312-633aed5da8a1e15dd296b1e408bd2ee7.7z

  • Size

    7.2MB

  • Sample

    221125-259r6sgg3z

  • MD5

    633aed5da8a1e15dd296b1e408bd2ee7

  • SHA1

    be1a9bec12fde32b4a17d245346c01145e89a810

  • SHA256

    26dd89268839f81f51f5d50e6855bf457d4f916bedbcf2341d1fa235134a13a1

  • SHA512

    0c620a191d97880421b6c86d53c7d98a2b52b218e521f0dd6451bf8d8420c3a029c33deb74b8019bd490577cc20b7a94f8338d8b15d97cc9116fffb9b1683a74

  • SSDEEP

    98304:i8p2E3sfzRHjpBq+AfuQWzB7M+TdNocYea5Mv4iruwNPD9r0RO1si8XEc7HOFcM9:lp2EERuLfrW9ckPrVN79AXvuFcgSUmR2

Score
10/10
persistence

Malware Config

Targets

    • Target

      campaign_312-633aed5da8a1e15dd296b1e408bd2ee7.7z

    • Size

      7.2MB

    • MD5

      633aed5da8a1e15dd296b1e408bd2ee7

    • SHA1

      be1a9bec12fde32b4a17d245346c01145e89a810

    • SHA256

      26dd89268839f81f51f5d50e6855bf457d4f916bedbcf2341d1fa235134a13a1

    • SHA512

      0c620a191d97880421b6c86d53c7d98a2b52b218e521f0dd6451bf8d8420c3a029c33deb74b8019bd490577cc20b7a94f8338d8b15d97cc9116fffb9b1683a74

    • SSDEEP

      98304:i8p2E3sfzRHjpBq+AfuQWzB7M+TdNocYea5Mv4iruwNPD9r0RO1si8XEc7HOFcM9:lp2EERuLfrW9ckPrVN79AXvuFcgSUmR2

    Score
    10/10
    persistence

    • Modifies system executable filetype association

      persistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • Registers COM server for autorun

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Change Default File Association

1
T1042

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks