Overview

overview

10

Static

static

ef34bcaad0...f3.exe

windows7-x64

10

ef34bcaad0...f3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef34bcaad0692eca90cc3d9b530f119033dd08e07d8dfeedb0ba611687e05ef3

  • Size

    50KB

  • Sample

    221126-k1ac3sff92

  • MD5

    0b397bb545be789ffd7c0ff37d155c00

  • SHA1

    f598ef1661800987cb3dc4dd473167a030cfd659

  • SHA256

    ef34bcaad0692eca90cc3d9b530f119033dd08e07d8dfeedb0ba611687e05ef3

  • SHA512

    cdf35bcc6697b1da28408749900e6645c875c3b4075c001015460cd5d255d29aa9f7979d533a8b3357c8f8f79d9a5aaaea4a74ee5ecdf04db68423d5986681bc

  • SSDEEP

    768:Rnf8qlIDhgmuChdoAr1YyTLgHVKrGL2QU+AEzkzroZUEIZpjDFwdvzqlz/1H5r:RfqlpPoAr1ERL2QU+AECeUEIZpj5wBI

Score
10/10
persistence

Malware Config

Targets

    • Target

      ef34bcaad0692eca90cc3d9b530f119033dd08e07d8dfeedb0ba611687e05ef3

    • Size

      50KB

    • MD5

      0b397bb545be789ffd7c0ff37d155c00

    • SHA1

      f598ef1661800987cb3dc4dd473167a030cfd659

    • SHA256

      ef34bcaad0692eca90cc3d9b530f119033dd08e07d8dfeedb0ba611687e05ef3

    • SHA512

      cdf35bcc6697b1da28408749900e6645c875c3b4075c001015460cd5d255d29aa9f7979d533a8b3357c8f8f79d9a5aaaea4a74ee5ecdf04db68423d5986681bc

    • SSDEEP

      768:Rnf8qlIDhgmuChdoAr1YyTLgHVKrGL2QU+AEzkzroZUEIZpjDFwdvzqlz/1H5r:RfqlpPoAr1ERL2QU+AECeUEIZpj5wBI

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks