Overview

overview

8

Static

static

9fda75c77e...25.exe

windows7-x64

8

9fda75c77e...25.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9fda75c77ed5e6d8f673aa4c1582d5497dd9f8958199e28997b0f3befaf4b625

  • Size

    1.8MB

  • Sample

    221125-h629yaaf72

  • MD5

    99ba50fea2e8f47619b77ec74d562e1c

  • SHA1

    017d72654d254f46de346efaad0a9b0937f38a60

  • SHA256

    9fda75c77ed5e6d8f673aa4c1582d5497dd9f8958199e28997b0f3befaf4b625

  • SHA512

    5f52e07673adbd6132c05873266c3a25770387bdb64e5a8452f7acea526e1b6809e50ba62522f07b98bcfe1a9942c3b52eeb14688d6391e2f61fb6cd31a2bcad

  • SSDEEP

    49152:RvpZYsaHqe9AQhlPiTPi/3OQBipYI46GUA:RvpZuqe9AQhlPiTPi/3OQBipYI46GUA

Score
8/10
persistence

Malware Config

Targets

    • Target

      9fda75c77ed5e6d8f673aa4c1582d5497dd9f8958199e28997b0f3befaf4b625

    • Size

      1.8MB

    • MD5

      99ba50fea2e8f47619b77ec74d562e1c

    • SHA1

      017d72654d254f46de346efaad0a9b0937f38a60

    • SHA256

      9fda75c77ed5e6d8f673aa4c1582d5497dd9f8958199e28997b0f3befaf4b625

    • SHA512

      5f52e07673adbd6132c05873266c3a25770387bdb64e5a8452f7acea526e1b6809e50ba62522f07b98bcfe1a9942c3b52eeb14688d6391e2f61fb6cd31a2bcad

    • SSDEEP

      49152:RvpZYsaHqe9AQhlPiTPi/3OQBipYI46GUA:RvpZuqe9AQhlPiTPi/3OQBipYI46GUA

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks