Overview

overview

8

Static

static

3eaf579dcc...49.exe

windows7-x64

8

3eaf579dcc...49.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3eaf579dcc53ad23f6d1a363209cc1bc6f4eec50d028dc7591fd71a600f13049

  • Size

    831KB

  • Sample

    221128-dp1bsseg7y

  • MD5

    1c84e0ae5203f89cda160f4795859a07

  • SHA1

    96b16999bacf2a89f081c1902d1f72bbd2395778

  • SHA256

    3eaf579dcc53ad23f6d1a363209cc1bc6f4eec50d028dc7591fd71a600f13049

  • SHA512

    2801a63a61cd5c0f6fd1e0c8954c7a74d2fd260303d8e851ef8c98eece95e0c6348db91af0d19ad1e70ab7545a488c968abe22956e212479f3974f8be58f38be

  • SSDEEP

    24576:NrfGR2wDeRMTeKfzaTCiDJ7bGvPcclRodb+5wLAahFXwjM:NYYRMTZfzaTCiDJXG50ebim

Score
8/10
discovery

Malware Config

Targets

    • Target

      3eaf579dcc53ad23f6d1a363209cc1bc6f4eec50d028dc7591fd71a600f13049

    • Size

      831KB

    • MD5

      1c84e0ae5203f89cda160f4795859a07

    • SHA1

      96b16999bacf2a89f081c1902d1f72bbd2395778

    • SHA256

      3eaf579dcc53ad23f6d1a363209cc1bc6f4eec50d028dc7591fd71a600f13049

    • SHA512

      2801a63a61cd5c0f6fd1e0c8954c7a74d2fd260303d8e851ef8c98eece95e0c6348db91af0d19ad1e70ab7545a488c968abe22956e212479f3974f8be58f38be

    • SSDEEP

      24576:NrfGR2wDeRMTeKfzaTCiDJ7bGvPcclRodb+5wLAahFXwjM:NYYRMTZfzaTCiDJXG50ebim

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks