Overview

overview

7

Static

static

1

9599c88ace...ed.exe

windows7-x64

7

9599c88ace...ed.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9599c88ace08e6add9e90b6ed8b06aefdd65b18859a099c01770c1e4cd1d8fed

  • Size

    189KB

  • Sample

    221125-rhs6ssgc41

  • MD5

    a9bed20e3d1e727e060c6ba9b1326421

  • SHA1

    3d5cf54a704ed9972363dcc088f545eefa10135e

  • SHA256

    9599c88ace08e6add9e90b6ed8b06aefdd65b18859a099c01770c1e4cd1d8fed

  • SHA512

    47b6a428280d449449f339dc2d7d2ac7dfdc237c10a43d6c0d1f85561aa139c9d842906baea8a60b1b411e6d55f40dc746b0dd5036915a89d290229ff256d884

  • SSDEEP

    3072:qCuFP2lXIHDgXJFdXRY2pLKQlNlMuQ3ZqqoHyMhmgUQroGOsDRLcKf1mOnjsPHlS:q183TzLKyM6VHrUzG9D9lf1SPFLSkFHU

Score
7/10
persistence

Malware Config

Targets

    • Target

      9599c88ace08e6add9e90b6ed8b06aefdd65b18859a099c01770c1e4cd1d8fed

    • Size

      189KB

    • MD5

      a9bed20e3d1e727e060c6ba9b1326421

    • SHA1

      3d5cf54a704ed9972363dcc088f545eefa10135e

    • SHA256

      9599c88ace08e6add9e90b6ed8b06aefdd65b18859a099c01770c1e4cd1d8fed

    • SHA512

      47b6a428280d449449f339dc2d7d2ac7dfdc237c10a43d6c0d1f85561aa139c9d842906baea8a60b1b411e6d55f40dc746b0dd5036915a89d290229ff256d884

    • SSDEEP

      3072:qCuFP2lXIHDgXJFdXRY2pLKQlNlMuQ3ZqqoHyMhmgUQroGOsDRLcKf1mOnjsPHlS:q183TzLKyM6VHrUzG9D9lf1SPFLSkFHU

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks