Overview

overview

6

Static

static

45aecc2776...53.exe

windows7-x64

6

45aecc2776...53.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45aecc2776a78280536fd2fa9a35b8d593da12af2095d97f06b1a3362a35c353

  • Size

    260KB

  • Sample

    221128-r4lnvabc74

  • MD5

    1d24fd1396e46ed85678b34b1b5d2f88

  • SHA1

    8b03cc4008937098ee1de6e2f84fb63b15178562

  • SHA256

    45aecc2776a78280536fd2fa9a35b8d593da12af2095d97f06b1a3362a35c353

  • SHA512

    fae8d2e9d1b0979a9253dfdd697641d0f8d9c5fb68b8759535032dd547d44ba695eeb1593f935371aeeb38eb3e48dddb568b39e3cfa1b21815e59ae958488fee

  • SSDEEP

    6144:OIkWdjRvEIEHISSsip4oZ2+SZd4ZSSsi:d0s9p7Z27ZdO9

Score
6/10
persistence

Malware Config

Targets

    • Target

      45aecc2776a78280536fd2fa9a35b8d593da12af2095d97f06b1a3362a35c353

    • Size

      260KB

    • MD5

      1d24fd1396e46ed85678b34b1b5d2f88

    • SHA1

      8b03cc4008937098ee1de6e2f84fb63b15178562

    • SHA256

      45aecc2776a78280536fd2fa9a35b8d593da12af2095d97f06b1a3362a35c353

    • SHA512

      fae8d2e9d1b0979a9253dfdd697641d0f8d9c5fb68b8759535032dd547d44ba695eeb1593f935371aeeb38eb3e48dddb568b39e3cfa1b21815e59ae958488fee

    • SSDEEP

      6144:OIkWdjRvEIEHISSsip4oZ2+SZd4ZSSsi:d0s9p7Z27ZdO9

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks