Overview

overview

8

Static

static

9d4eb4a373...dd.exe

windows7-x64

8

9d4eb4a373...dd.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9d4eb4a37397e8abfb674bfb9974eb0daba26c4ab8ed15e35f8d0609829c8edd

  • Size

    3.4MB

  • Sample

    221126-2s9awaef2t

  • MD5

    f4d7ffba6ce5cefad4835b2893d73d0a

  • SHA1

    aac8491ab948f7bfe4168a2b1ac6903cd3f992c1

  • SHA256

    9d4eb4a37397e8abfb674bfb9974eb0daba26c4ab8ed15e35f8d0609829c8edd

  • SHA512

    40e6efb9093fecc17493c12f2311173b0a285e3697720ea84e3d34de00888ba967dfd4914ab2447237ee8bbc4d844fdd2e91e95015aaa5ad0740d97eb7f18f5b

  • SSDEEP

    98304:q3yobVyq03fv0oKATM6A/7zf8iEFb1OL6PVgNZz/:oyey13EoXM68vHO5fPeNZ7

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      9d4eb4a37397e8abfb674bfb9974eb0daba26c4ab8ed15e35f8d0609829c8edd

    • Size

      3.4MB

    • MD5

      f4d7ffba6ce5cefad4835b2893d73d0a

    • SHA1

      aac8491ab948f7bfe4168a2b1ac6903cd3f992c1

    • SHA256

      9d4eb4a37397e8abfb674bfb9974eb0daba26c4ab8ed15e35f8d0609829c8edd

    • SHA512

      40e6efb9093fecc17493c12f2311173b0a285e3697720ea84e3d34de00888ba967dfd4914ab2447237ee8bbc4d844fdd2e91e95015aaa5ad0740d97eb7f18f5b

    • SSDEEP

      98304:q3yobVyq03fv0oKATM6A/7zf8iEFb1OL6PVgNZz/:oyey13EoXM68vHO5fPeNZ7

    Score
    8/10
    discoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Registry Run Keys / Startup Folder

1
T1060

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks