Overview

overview

10

Static

static

775d3cd2fc...3f.exe

windows7-x64

10

775d3cd2fc...3f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    775d3cd2fcc98401c1f3f69342ca963e7a291f436cdabf59ce8bac0b3979403f

  • Size

    50KB

  • Sample

    221126-kxk1eafe88

  • MD5

    16394a41f8fc229d19c7ff9dbb9b23a0

  • SHA1

    642e66584c53ca3726080b7b328b0ca1ab8bd3e5

  • SHA256

    775d3cd2fcc98401c1f3f69342ca963e7a291f436cdabf59ce8bac0b3979403f

  • SHA512

    adc50c2f3455433b58132ed594d564346935fe61ff32b97051362a9c74277c650c1a5a6478d3fad50c9e065b54050e29f0f20233372d83c4e8edbb3c340a6e9f

  • SSDEEP

    768:pb5nSFf+PRv7Wje3MbGHLizoWlW3WL9EWVKLBIE1Pz1B1/1H57X:plSNQvijecbWOzoWmWLXMhv

Score
10/10
persistence

Malware Config

Targets

    • Target

      775d3cd2fcc98401c1f3f69342ca963e7a291f436cdabf59ce8bac0b3979403f

    • Size

      50KB

    • MD5

      16394a41f8fc229d19c7ff9dbb9b23a0

    • SHA1

      642e66584c53ca3726080b7b328b0ca1ab8bd3e5

    • SHA256

      775d3cd2fcc98401c1f3f69342ca963e7a291f436cdabf59ce8bac0b3979403f

    • SHA512

      adc50c2f3455433b58132ed594d564346935fe61ff32b97051362a9c74277c650c1a5a6478d3fad50c9e065b54050e29f0f20233372d83c4e8edbb3c340a6e9f

    • SSDEEP

      768:pb5nSFf+PRv7Wje3MbGHLizoWlW3WL9EWVKLBIE1Pz1B1/1H57X:plSNQvijecbWOzoWmWLXMhv

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks