Overview

overview

8

Static

static

d4822c13da...6a.exe

windows7-x64

8

d4822c13da...6a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d4822c13da68734e990ead95e483876149adb40a12fa0bae7266349c8237fe6a

  • Size

    219KB

  • Sample

    221127-xe3hysec9v

  • MD5

    bdafddcdf44fa5e0217f22db80337781

  • SHA1

    4ccb9cfcb6837adcb0861f89142599efbccf54c3

  • SHA256

    d4822c13da68734e990ead95e483876149adb40a12fa0bae7266349c8237fe6a

  • SHA512

    86cd0e78ce73799ed2da11d7e08cc83a58d46e7db0ddb229fce17e5203a0c8b553515a06377212e7911bcf0fbb7804006bb58f244b4f6e077d0cfdc91f992d07

  • SSDEEP

    3072:MeGMtEOzT7LEoZMYMfIcsSuYu75jeeP4Y1pfhJ/TA9rl3pl5+:hGMeOzT7zMfIBR/j34Y1nJ/kplU

Score
8/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      d4822c13da68734e990ead95e483876149adb40a12fa0bae7266349c8237fe6a

    • Size

      219KB

    • MD5

      bdafddcdf44fa5e0217f22db80337781

    • SHA1

      4ccb9cfcb6837adcb0861f89142599efbccf54c3

    • SHA256

      d4822c13da68734e990ead95e483876149adb40a12fa0bae7266349c8237fe6a

    • SHA512

      86cd0e78ce73799ed2da11d7e08cc83a58d46e7db0ddb229fce17e5203a0c8b553515a06377212e7911bcf0fbb7804006bb58f244b4f6e077d0cfdc91f992d07

    • SSDEEP

      3072:MeGMtEOzT7LEoZMYMfIcsSuYu75jeeP4Y1pfhJ/TA9rl3pl5+:hGMeOzT7zMfIBR/j34Y1nJ/kplU

    Score
    8/10
    discoveryevasionpersistence

    • Stops running service(s)

      evasion

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks