Overview

overview

10

Static

static

f3a78d5ba5...f7.exe

windows7-x64

10

f3a78d5ba5...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3a78d5ba5003ea7a6054b423efc973ecd694d177b1658d580c46c94f9647ef7

  • Size

    72KB

  • Sample

    221125-x8ec8aac36

  • MD5

    a79e1c9d00a323fc6b344e69e83cb864

  • SHA1

    171b16a6349572ca6dfcd7099bd19b2e7ed464d6

  • SHA256

    f3a78d5ba5003ea7a6054b423efc973ecd694d177b1658d580c46c94f9647ef7

  • SHA512

    0c268daeade4b6694ceaeda9fcb37574887fe02465b2a298c53ac30a7ba91272cd3521a5df877aea1f938d4977c6f3c0a8dcb0b182d8c1344ed29b90a8c00751

  • SSDEEP

    384:N6wayA+1mwnA353BXR+oGfPmfm4MlcTGXdhjwroyY2rebV5O6KgxWb/83BXR+oGx:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrE

Score
10/10
evasion

Malware Config

Targets

    • Target

      f3a78d5ba5003ea7a6054b423efc973ecd694d177b1658d580c46c94f9647ef7

    • Size

      72KB

    • MD5

      a79e1c9d00a323fc6b344e69e83cb864

    • SHA1

      171b16a6349572ca6dfcd7099bd19b2e7ed464d6

    • SHA256

      f3a78d5ba5003ea7a6054b423efc973ecd694d177b1658d580c46c94f9647ef7

    • SHA512

      0c268daeade4b6694ceaeda9fcb37574887fe02465b2a298c53ac30a7ba91272cd3521a5df877aea1f938d4977c6f3c0a8dcb0b182d8c1344ed29b90a8c00751

    • SSDEEP

      384:N6wayA+1mwnA353BXR+oGfPmfm4MlcTGXdhjwroyY2rebV5O6KgxWb/83BXR+oGx:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrE

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Privilege Escalation

Defense Evasion

Hidden Files and Directories

1
T1158

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks