Overview

overview

7

Static

static

3

2622ba10e3...29.exe

windows7-x64

7

2622ba10e3...29.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2622ba10e357483332f3b3b2504e4629

  • Size

    156KB

  • Sample

    231231-dvfvcaaga6

  • MD5

    2622ba10e357483332f3b3b2504e4629

  • SHA1

    ad69cad2b1147fc780d4a74c9133122567c5db04

  • SHA256

    3ca928dd7d41771d0ce3c4bfbb1f259de095357a2629046b05ef62419b23c520

  • SHA512

    bed0619a85621e71a978b052298d6e83d6315fb2b2c3937d70a770f896ce0c85de20315add3075c930fc27d2bac37ce9bd3be53485458821b0460326bf40c253

  • SSDEEP

    3072:ano2O5xl+vVWNRIqyZbhWeU50bKgYF75dgcPTeIppy:anR7f/c0bsdgcPTe1

Score
7/10
persistence

Malware Config

Targets

    • Target

      2622ba10e357483332f3b3b2504e4629

    • Size

      156KB

    • MD5

      2622ba10e357483332f3b3b2504e4629

    • SHA1

      ad69cad2b1147fc780d4a74c9133122567c5db04

    • SHA256

      3ca928dd7d41771d0ce3c4bfbb1f259de095357a2629046b05ef62419b23c520

    • SHA512

      bed0619a85621e71a978b052298d6e83d6315fb2b2c3937d70a770f896ce0c85de20315add3075c930fc27d2bac37ce9bd3be53485458821b0460326bf40c253

    • SSDEEP

      3072:ano2O5xl+vVWNRIqyZbhWeU50bKgYF75dgcPTeIppy:anR7f/c0bsdgcPTe1

    Score
    7/10
    persistence

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

5
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks