Overview

overview

10

Static

static

5

bc1610960a...fb.exe

windows7-x64

10

bc1610960a...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc1610960a9115f448e6f41cae197d2c7705db3c5a949de5ae7eaff6fdb5e0fb

  • Size

    743KB

  • Sample

    221126-jkl69sfg5x

  • MD5

    517de090656321d2f34f03300bf1303d

  • SHA1

    49b24cfef234818374ca8be036dfe3b788a5432a

  • SHA256

    bc1610960a9115f448e6f41cae197d2c7705db3c5a949de5ae7eaff6fdb5e0fb

  • SHA512

    d59ca5ca3d391bb262227f44b5ff5b432a5b393b2f8cece4a3614c8e74f65ae6d751411cabb5f83844f78c106af1ed86b53de4ecec8a5f513dabcb67e1d0e500

  • SSDEEP

    12288:jLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QS1BVILcS:3fmMv6Ckr7Mny5QsSB

Score
10/10
njratmicrosoftpersistencephishingtrojan

Malware Config

Targets

    • Target

      bc1610960a9115f448e6f41cae197d2c7705db3c5a949de5ae7eaff6fdb5e0fb

    • Size

      743KB

    • MD5

      517de090656321d2f34f03300bf1303d

    • SHA1

      49b24cfef234818374ca8be036dfe3b788a5432a

    • SHA256

      bc1610960a9115f448e6f41cae197d2c7705db3c5a949de5ae7eaff6fdb5e0fb

    • SHA512

      d59ca5ca3d391bb262227f44b5ff5b432a5b393b2f8cece4a3614c8e74f65ae6d751411cabb5f83844f78c106af1ed86b53de4ecec8a5f513dabcb67e1d0e500

    • SSDEEP

      12288:jLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QS1BVILcS:3fmMv6Ckr7Mny5QsSB

    Score
    10/10
    njratpersistencetrojanmicrosoftphishing
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

4
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks