Overview

overview

8

Static

static

c5639ff410...ab.exe

windows7-x64

8

c5639ff410...ab.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab

  • Size

    322KB

  • Sample

    221204-v5avhsef5w

  • MD5

    ec9c131b92b4c37bae39adb79b167e0e

  • SHA1

    066430a555f2afe51ee39db3b7e2e03791105e40

  • SHA256

    c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab

  • SHA512

    920b6e44ac032c13e2bfd861440c93e04c6c67960191d89e385d6c596c916e148f0555422aeb49c3aa6b309f5191c8d2cfd792c3d50a0e01b5cc5a84257cc5a7

  • SSDEEP

    6144:217/qs70CkEE/xzP6m/HDnP3Bw3gSfYlYaaRIDylnxtIYmDh7HgARCGuD:C7/qs7LUOmbPxww1vu1mrgdG

Score
8/10
persistence

Malware Config

Targets

    • Target

      c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab

    • Size

      322KB

    • MD5

      ec9c131b92b4c37bae39adb79b167e0e

    • SHA1

      066430a555f2afe51ee39db3b7e2e03791105e40

    • SHA256

      c5639ff410da6b9713d95f5bed56e763f3e5c07c06aa0e663d1336c13a18bcab

    • SHA512

      920b6e44ac032c13e2bfd861440c93e04c6c67960191d89e385d6c596c916e148f0555422aeb49c3aa6b309f5191c8d2cfd792c3d50a0e01b5cc5a84257cc5a7

    • SSDEEP

      6144:217/qs70CkEE/xzP6m/HDnP3Bw3gSfYlYaaRIDylnxtIYmDh7HgARCGuD:C7/qs7LUOmbPxww1vu1mrgdG

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks