Overview

overview

8

Static

static

1

ClassicShe..._1.exe

windows10-1703-x64

8

Resubmissions

31-03-2023 19:44

230331-yf17ysec4y 8

31-03-2023 19:41

230331-yeb7fach44 8

31-03-2023 19:38

230331-ycpdzsch33 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ClassicShellSetup_4_3_1.exe

  • Size

    6.9MB

  • Sample

    230331-yeb7fach44

  • MD5

    230d1965a035bc4c894941caa3d19a32

  • SHA1

    317604eba6e94e8777741d577b0ef160a0af3258

  • SHA256

    942c7ee37303c962628555e196eb35f4465bb45d204600dd2518dd20ddebe5e2

  • SHA512

    00ac51bdf37bde44668e5cf20854f67df1b222959f8876e2fc3d05814cdb7b11c728411e5ce04187c7fb9c7939cab56cffaa3a8f02bf0a17437dcf7af51755a4

  • SSDEEP

    196608:1fCy8wAafvB9W95jcOqihiDXHzk2w5gzOAiZiU8sXo:Uy8wAafEjnqzkt//s

Score
8/10

Malware Config

Targets

    • Target

      ClassicShellSetup_4_3_1.exe

    • Size

      6.9MB

    • MD5

      230d1965a035bc4c894941caa3d19a32

    • SHA1

      317604eba6e94e8777741d577b0ef160a0af3258

    • SHA256

      942c7ee37303c962628555e196eb35f4465bb45d204600dd2518dd20ddebe5e2

    • SHA512

      00ac51bdf37bde44668e5cf20854f67df1b222959f8876e2fc3d05814cdb7b11c728411e5ce04187c7fb9c7939cab56cffaa3a8f02bf0a17437dcf7af51755a4

    • SSDEEP

      196608:1fCy8wAafvB9W95jcOqihiDXHzk2w5gzOAiZiU8sXo:Uy8wAafEjnqzkt//s

    Score
    8/10

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

4
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks