Overview

overview

6

Static

static

bda04c6ac6...7e.exe

windows7-x64

1

bda04c6ac6...7e.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bda04c6ac66146c80120b8edfa4e56008cd2a408479749732bc6626e4709fd7e

  • Size

    80KB

  • Sample

    221129-yacmeahg62

  • MD5

    3c5727c96e68ec48960decf033b82d3a

  • SHA1

    032a35f59a1ba07b99f6353a4c3414ba3c832d77

  • SHA256

    bda04c6ac66146c80120b8edfa4e56008cd2a408479749732bc6626e4709fd7e

  • SHA512

    480a781e21aeaf1faa521af745d6d2de8cc8f2f567e601fcdfa35e7738e1a6fe7f70e6880045ab543c7ef76d0101169b54c6f402049328a2ce5a630ff55ffd5f

  • SSDEEP

    1536:jiE+1SM41FJeM1XMZf62lRSvKrAQr7qzr:31bX1XaAQr74

Score
6/10
microsoftpersistencephishing

Malware Config

Targets

    • Target

      bda04c6ac66146c80120b8edfa4e56008cd2a408479749732bc6626e4709fd7e

    • Size

      80KB

    • MD5

      3c5727c96e68ec48960decf033b82d3a

    • SHA1

      032a35f59a1ba07b99f6353a4c3414ba3c832d77

    • SHA256

      bda04c6ac66146c80120b8edfa4e56008cd2a408479749732bc6626e4709fd7e

    • SHA512

      480a781e21aeaf1faa521af745d6d2de8cc8f2f567e601fcdfa35e7738e1a6fe7f70e6880045ab543c7ef76d0101169b54c6f402049328a2ce5a630ff55ffd5f

    • SSDEEP

      1536:jiE+1SM41FJeM1XMZf62lRSvKrAQr7qzr:31bX1XaAQr74

    Score
    6/10
    microsoftpersistencephishing

    • Adds Run key to start application

      persistence

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks