Overview

overview

8

Static

static

1e0fdeb320...55.exe

windows7-x64

8

1e0fdeb320...55.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e0fdeb32073187776c4d5a64c612e8d8d6816e7823d37df5142ab9d15f92e55

  • Size

    376KB

  • Sample

    221127-t3q82sbh97

  • MD5

    bec16881261b933d10d475ecac658e62

  • SHA1

    6e819cc4a64e56a9ff96573d3b7fd52f60dfaee2

  • SHA256

    1e0fdeb32073187776c4d5a64c612e8d8d6816e7823d37df5142ab9d15f92e55

  • SHA512

    379253f2b2e14ee82e2886173a359ff0a56077af19abf0db6ed90699366fdde72f6ac9ec47b09485939b0fc3230792e36357134015570456b063ddee983ff655

  • SSDEEP

    6144:uSnPobDUShUmcREtiUcvpKey4Kkb0c/Fnk06hiqP2NXoiyJmEW5c1xZu9MYR3b:dngbDnsREtirRK3LZSey+2NYxM5Cx8SE

Score
8/10
persistence

Malware Config

Targets

    • Target

      1e0fdeb32073187776c4d5a64c612e8d8d6816e7823d37df5142ab9d15f92e55

    • Size

      376KB

    • MD5

      bec16881261b933d10d475ecac658e62

    • SHA1

      6e819cc4a64e56a9ff96573d3b7fd52f60dfaee2

    • SHA256

      1e0fdeb32073187776c4d5a64c612e8d8d6816e7823d37df5142ab9d15f92e55

    • SHA512

      379253f2b2e14ee82e2886173a359ff0a56077af19abf0db6ed90699366fdde72f6ac9ec47b09485939b0fc3230792e36357134015570456b063ddee983ff655

    • SSDEEP

      6144:uSnPobDUShUmcREtiUcvpKey4Kkb0c/Fnk06hiqP2NXoiyJmEW5c1xZu9MYR3b:dngbDnsREtirRK3LZSey+2NYxM5Cx8SE

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks