Overview

overview

8

Static

static

18398479e3...e5.exe

windows7-x64

8

18398479e3...e5.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18398479e32c28b6c8b1d9e89ff89f884d2eb45bc1009f3e4ae97b97cf7ea1e5

  • Size

    220KB

  • Sample

    221125-e4k14aeg5x

  • MD5

    c4960c0fb4eca0dd1394dbc301d3bcab

  • SHA1

    7c15e04f9efab26b331bc770210a4bcc5959d25a

  • SHA256

    18398479e32c28b6c8b1d9e89ff89f884d2eb45bc1009f3e4ae97b97cf7ea1e5

  • SHA512

    6ef1e35675be8aa679079696751d9bf026f92104809edcec4334ff5c2ec06707528086ff6c9dd969747b5e2670ddc508b4fb76ea428be2d52214f853fce73522

  • SSDEEP

    3072:5SVNxOWlkFpcEsg39MLwapmZHUouzF9MQTUYDGYNcRYxYFlgE2hM+zIdf6pXG/:5KNUWlZk9cNuU56yv4ahMF6

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      18398479e32c28b6c8b1d9e89ff89f884d2eb45bc1009f3e4ae97b97cf7ea1e5

    • Size

      220KB

    • MD5

      c4960c0fb4eca0dd1394dbc301d3bcab

    • SHA1

      7c15e04f9efab26b331bc770210a4bcc5959d25a

    • SHA256

      18398479e32c28b6c8b1d9e89ff89f884d2eb45bc1009f3e4ae97b97cf7ea1e5

    • SHA512

      6ef1e35675be8aa679079696751d9bf026f92104809edcec4334ff5c2ec06707528086ff6c9dd969747b5e2670ddc508b4fb76ea428be2d52214f853fce73522

    • SSDEEP

      3072:5SVNxOWlkFpcEsg39MLwapmZHUouzF9MQTUYDGYNcRYxYFlgE2hM+zIdf6pXG/:5KNUWlZk9cNuU56yv4ahMF6

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks