Overview

overview

8

Static

static

67382d2ccc...3f.exe

windows7-x64

8

67382d2ccc...3f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67382d2ccc2b1d509f43d9d51690c34ebb881148c3cba06bae8ff93ecd3ef53f

  • Size

    27KB

  • Sample

    221127-2sf94aec92

  • MD5

    291c6983919cf96defb04dc705d71b80

  • SHA1

    ecaef7540497fadef77d80542a7633e2e7422bb8

  • SHA256

    67382d2ccc2b1d509f43d9d51690c34ebb881148c3cba06bae8ff93ecd3ef53f

  • SHA512

    96e135ad1876464c10b7f50b752b8113da501100b9fc31159a8e837ece66a9e50efdf4c925ca35379ef2a5a5c8f2a16cdf43913840e53df3348dfed70f32702d

  • SSDEEP

    768:ruM/sYxbXAVliI+xBA7fdz4qsS/eqk/k0:ruMhUbixUL9Cd

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      67382d2ccc2b1d509f43d9d51690c34ebb881148c3cba06bae8ff93ecd3ef53f

    • Size

      27KB

    • MD5

      291c6983919cf96defb04dc705d71b80

    • SHA1

      ecaef7540497fadef77d80542a7633e2e7422bb8

    • SHA256

      67382d2ccc2b1d509f43d9d51690c34ebb881148c3cba06bae8ff93ecd3ef53f

    • SHA512

      96e135ad1876464c10b7f50b752b8113da501100b9fc31159a8e837ece66a9e50efdf4c925ca35379ef2a5a5c8f2a16cdf43913840e53df3348dfed70f32702d

    • SSDEEP

      768:ruM/sYxbXAVliI+xBA7fdz4qsS/eqk/k0:ruMhUbixUL9Cd

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Deletes itself

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks