Overview

overview

6

Static

static

5

c01f4d1d95...1e.exe

windows7-x64

6

c01f4d1d95...1e.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c01f4d1d95dc09a185445aa7830087527731dbb3fe6cc0834eab1e4c94e97a1e

  • Size

    3.6MB

  • Sample

    221127-q5z27acb35

  • MD5

    36d335b9992434341b3b5f6794517a2f

  • SHA1

    5334fb6cc9b953018e84b07c8be37ca0e271e38e

  • SHA256

    c01f4d1d95dc09a185445aa7830087527731dbb3fe6cc0834eab1e4c94e97a1e

  • SHA512

    78b9149f1ace9d5f1c74c50f8a2fd3e589758f9343155edb3afca45e60c4d468f4dbe7c3c99f55ed2257b33947233118d13c2fb3e6410c891698c324d9124c51

  • SSDEEP

    49152:vVg5tQ7aDp5jZV5/zbOhnM4L6rm8+JeZ7lCMtsjAWBwZTQuM3cbAP4v34Xj:9g56k/z6nM4e/CNBBwZXNbAPBXj

Score
6/10
collectionpersistence

Malware Config

Targets

    • Target

      c01f4d1d95dc09a185445aa7830087527731dbb3fe6cc0834eab1e4c94e97a1e

    • Size

      3.6MB

    • MD5

      36d335b9992434341b3b5f6794517a2f

    • SHA1

      5334fb6cc9b953018e84b07c8be37ca0e271e38e

    • SHA256

      c01f4d1d95dc09a185445aa7830087527731dbb3fe6cc0834eab1e4c94e97a1e

    • SHA512

      78b9149f1ace9d5f1c74c50f8a2fd3e589758f9343155edb3afca45e60c4d468f4dbe7c3c99f55ed2257b33947233118d13c2fb3e6410c891698c324d9124c51

    • SSDEEP

      49152:vVg5tQ7aDp5jZV5/zbOhnM4L6rm8+JeZ7lCMtsjAWBwZTQuM3cbAP4v34Xj:9g56k/z6nM4e/CNBBwZXNbAPBXj

    Score
    6/10
    collectionpersistence

    • Accesses Microsoft Outlook profiles

      collection

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks