Overview

overview

10

Static

static

5629d4e1fc...cf.exe

windows7-x64

10

5629d4e1fc...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5629d4e1fc2ed1c44123dce248d1a543adbf0ab82340d3f55901d7265d1ccacf

  • Size

    92KB

  • Sample

    221126-kz3m8saf7x

  • MD5

    2e277ddcfd2e7a028343a590f78bc320

  • SHA1

    efc7ec64d5ac2cda3768fc6ecf1bc96d19c5b9d8

  • SHA256

    5629d4e1fc2ed1c44123dce248d1a543adbf0ab82340d3f55901d7265d1ccacf

  • SHA512

    fcce4a75d874dc1feacb4793e092569df0f33c187f36b3ffcd03ffef8220f544eaab68007a2d5801d7b503cac0be2c1660b10e30d50f14ce91be5938366012b8

  • SSDEEP

    1536:VmMDjYzH/29QvPXI4o0PdlDIFzBt3jLV3BGnMPJKEsztuJO:Loj/7vP7PdlDI9jLlBRh1sN

Score
10/10
persistence

Malware Config

Targets

    • Target

      5629d4e1fc2ed1c44123dce248d1a543adbf0ab82340d3f55901d7265d1ccacf

    • Size

      92KB

    • MD5

      2e277ddcfd2e7a028343a590f78bc320

    • SHA1

      efc7ec64d5ac2cda3768fc6ecf1bc96d19c5b9d8

    • SHA256

      5629d4e1fc2ed1c44123dce248d1a543adbf0ab82340d3f55901d7265d1ccacf

    • SHA512

      fcce4a75d874dc1feacb4793e092569df0f33c187f36b3ffcd03ffef8220f544eaab68007a2d5801d7b503cac0be2c1660b10e30d50f14ce91be5938366012b8

    • SSDEEP

      1536:VmMDjYzH/29QvPXI4o0PdlDIFzBt3jLV3BGnMPJKEsztuJO:Loj/7vP7PdlDI9jLlBRh1sN

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks