Overview

overview

10

Static

static

ac12dc6c2e...44.exe

windows7-x64

10

ac12dc6c2e...44.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac12dc6c2e92c6b28cad3871294989f89a0dda56ae8c0260b8d9b6d518c15e44

  • Size

    50KB

  • Sample

    221126-k1f6maaf9y

  • MD5

    16c0e99f21b447f99a60a3dbc4a7a040

  • SHA1

    381c24b9a7c41ee7dcfb1a8a5d17ed4ca9d4f698

  • SHA256

    ac12dc6c2e92c6b28cad3871294989f89a0dda56ae8c0260b8d9b6d518c15e44

  • SHA512

    8530b91d86aad939600353fb22f058f11a08e9ef192f4b18ee460a6fd849bc80c8ce4c11d47e56690a454154d573a47c688328d30d307a4f073a071c92c0fb16

  • SSDEEP

    1536:lVbh4wTTjt5LXyl42HPK/BW+M2MgnExsg:lVbWwLWL2Dg

Score
10/10
persistence

Malware Config

Targets

    • Target

      ac12dc6c2e92c6b28cad3871294989f89a0dda56ae8c0260b8d9b6d518c15e44

    • Size

      50KB

    • MD5

      16c0e99f21b447f99a60a3dbc4a7a040

    • SHA1

      381c24b9a7c41ee7dcfb1a8a5d17ed4ca9d4f698

    • SHA256

      ac12dc6c2e92c6b28cad3871294989f89a0dda56ae8c0260b8d9b6d518c15e44

    • SHA512

      8530b91d86aad939600353fb22f058f11a08e9ef192f4b18ee460a6fd849bc80c8ce4c11d47e56690a454154d573a47c688328d30d307a4f073a071c92c0fb16

    • SSDEEP

      1536:lVbh4wTTjt5LXyl42HPK/BW+M2MgnExsg:lVbWwLWL2Dg

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks