Overview

overview

10

Static

static

6d932c0fbf...3c.exe

windows7-x64

10

6d932c0fbf...3c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d932c0fbf08926bde61a575e6a9a8ae9c288a8c64519076e0caa55f262b4c3c

  • Size

    101KB

  • Sample

    221126-k2m1kafg59

  • MD5

    15e45aa4afd08ecc2a101a97f6367130

  • SHA1

    d98fbfb7675f2d5e3c8f1d4067305a5077bc0b8d

  • SHA256

    6d932c0fbf08926bde61a575e6a9a8ae9c288a8c64519076e0caa55f262b4c3c

  • SHA512

    040d7c477cd89656026bb98c66f3356d60db1ac32cf6c0347e81704307d2d6c2c1e33de2d2a7874f122562aef4b3fd37a1eb847dd87b906032423bbe420bffee

  • SSDEEP

    1536:mFaM0hv/CW+GhEt6H3efxWd4AvfkFVxX/m25gwclGQNM6jM4goo:mFrte3eJUTsVxOCgc0h1o

Score
10/10
persistence

Malware Config

Targets

    • Target

      6d932c0fbf08926bde61a575e6a9a8ae9c288a8c64519076e0caa55f262b4c3c

    • Size

      101KB

    • MD5

      15e45aa4afd08ecc2a101a97f6367130

    • SHA1

      d98fbfb7675f2d5e3c8f1d4067305a5077bc0b8d

    • SHA256

      6d932c0fbf08926bde61a575e6a9a8ae9c288a8c64519076e0caa55f262b4c3c

    • SHA512

      040d7c477cd89656026bb98c66f3356d60db1ac32cf6c0347e81704307d2d6c2c1e33de2d2a7874f122562aef4b3fd37a1eb847dd87b906032423bbe420bffee

    • SSDEEP

      1536:mFaM0hv/CW+GhEt6H3efxWd4AvfkFVxX/m25gwclGQNM6jM4goo:mFrte3eJUTsVxOCgc0h1o

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks