adwind | e7aab6ecc96be090ab8e04384e4685ed3e92466f5c776aa155a7fd5f05a098e6

Sharing

Copy URL Twitter E-mail

General

Target
SorillusRAT.rar
Size 69.9MB
Sample240228-s31xtafb6v
SHA256 e7aab6ecc96be090ab8e04384e4685ed3e92466f5c776aa155a7fd5f05a098e6
MD5 6b59fc4285e7842e36f3ec5a72935b44
SHA1 c1f3a89ac73f57c68c78bc9a1ec4c1fac687b9af
SHA512 3e94bfc4159f887aaf9aa54a125e8a808b9414f33d43bdea4cdde57888cb4751736f6d712a07261b49dc2fdeb30f9630ce4a8dea0a38613fde7b593dbe6f502a
SSDEEP 1572864:CjrXw15+AqSyDW01+Q424OK7KHlqTU+/ajZwnmxVDr/RtY:CI15+6Qjp4OK7KHlqofjZ0mxVw
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

adwind

Malware Config

Targets

- Target
  SorillusRAT.rar
- Size 69.9MB
- SHA256 e7aab6ecc96be090ab8e04384e4685ed3e92466f5c776aa155a7fd5f05a098e6
- MD5 6b59fc4285e7842e36f3ec5a72935b44
- SHA1 c1f3a89ac73f57c68c78bc9a1ec4c1fac687b9af
- SHA512 3e94bfc4159f887aaf9aa54a125e8a808b9414f33d43bdea4cdde57888cb4751736f6d712a07261b49dc2fdeb30f9630ce4a8dea0a38613fde7b593dbe6f502a
- SSDEEP 1572864:CjrXw15+AqSyDW01+Q424OK7KHlqTU+/ajZwnmxVDr/RtY:CI15+6Qjp4OK7KHlqofjZ0mxVw
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  Sorillus/jre1.8.0_361/Welcome.html
- Size 955B
- SHA256 b95219f315577a786ea61060252b1fcd8bbf1266003f3f045c5d1fe612dbe87b
- MD5 b292ae0fb1b4f20a7d0f8791af97db50
- SHA1 476fecd1d9b61151a1ff622454c8095e41ca5178
- SHA512 1bc45e9453f70abf7625c3a0f6506c22cb3de10ca4005a97df460b14a174c0484e0994af63978151cf5436edaf77519151dd9a0606764e2426707457b13828a7
- MD5 SHA1 SHA512
Score

1^/10
behavioral3 behavioral4
- Target
  Sorillus/jre1.8.0_361/bin/JAWTAccessBridge-64.dll
- Size 21KB
- SHA256 d6526ffe897f5ba1f57f223c9b700ba8ba779d2067125c7a11eb6994d133f870
- MD5 6ceda3ba1491263933682282bb5a1d77
- SHA1 f11ed2d901df7e75933a6e98f5a36ded97f9fd30
- SHA512 62a909b63d57b962ee992d2bc2761558229d9cbc7b104c7cdc1563ea33b47ea1cf8c4267dfc76eaac581cb06d7a16a6f8403cbe0379e505689b8953d15dfebbd
- SSDEEP 384:/LFzvdlsZ/s3OIyuJIYieTFhO0DsPxh8E9VF0NypZGCzg:hvDspcByueYiUFgPxWEPc0g
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  Sorillus/jre1.8.0_361/bin/JavaAccessBridge-64.dll
- Size 153KB
- SHA256 c980283edd664bc71b299675ab861650e9b7da5e7876e0ab3ee3d7e36d64bb68
- MD5 1eff9d99af8d19f696d573e34cedca45
- SHA1 aecc32d32af49e87f79a89f7dc141f3653aaca71
- SHA512 429c88566e2d16065ba569457337e9cdbe8a0e2a0a1ddc56b56c9cf0549a0a193de9a98098a4aa71d567de6a2d2129d9a77a373f4b151c7c7588daf033915cc6
- SSDEEP 3072:hbJfYhCk2MirazOw6CEKr65LizjUu/rNI7gILtSL9wFxHBiKzX3wE/qXvxhmGfNe:tIjUAkB2s
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  Sorillus/jre1.8.0_361/bin/WindowsAccessBridge-64.dll
- Size 190KB
- SHA256 2284dd976c8d56db535e4eaf51c99107f136d59dff1e028a3651919800780364
- MD5 a29afdfa9183650e1bdd2308df510fb5
- SHA1 22c507916bef3d16903d3be32dcd106edd3cc7fa
- SHA512 8e9844ec99c6c1a5b22877282f2065864313bac755d028970cd2374a641b9a30c9876fd880cc0593a96ac0356da0817f1a8e16beb411ae4241ae4ec46bfd90f7
- SSDEEP 3072:ij5LPy2rZhORrn3voroeDI13km5XTnpiXVlgq+BJUCxx0:iNLPXEhnfyon1UiXqQJk
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-console-l1-1-0.dll
- Size 11KB
- SHA256 2afbfa1d77969d0f4cee4547870355498d5c1da81d241e09556d0bd1d6230f8c
- MD5 919e653868a3d9f0c9865941573025df
- SHA1 eff2d4ff97e2b8d7ed0e456cb53b74199118a2e2
- SHA512 6aec9d7767eb82ebc893ebd97d499debff8da130817b6bb4bcb5eb5de1b074898f87db4f6c48b50052d4f8a027b3a707cad9d7ed5837a6dd9b53642b8a168932
- SSDEEP 192:4nWYhWxWWFYg7VWQ4uWjXUtpwBqnajrmaaGJ:2WYhWvZqlQGJ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-console-l1-2-0.dll
- Size 11KB
- SHA256 00942431c2d3193061c7f4dc340e8446bfdbf792a7489f60349299dff689c2f9
- MD5 7676560d0e9bc1ee9502d2f920d2892f
- SHA1 4a7a7a99900e41ff8a359ca85949acd828ddb068
- SHA512 f1e8db9ad44cd1aa991b9ed0e000c58978eb60b3b7d9908b6eb78e8146e9e12590b0014fc4a97bc490ffe378c0bf59a6e02109bfd8a01c3b6d0d653a5b612d15
- SSDEEP 192:iTWYhWyWWFYg7VWQ4uWq6Cu87ZqnajgnLSyu:sWYhWi1XHllk2yu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral12
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-datetime-l1-1-0.dll
- Size 11KB
- SHA256 77577f35d3a61217ea70f21398e178f8749455689db52a2b35a85f9b54c79638
- MD5 ac51e3459e8fce2a646a6ad4a2e220b9
- SHA1 60cf810b7ad8f460d0b8783ce5e5bbcd61c82f1a
- SHA512 6239240d4f4fa64fc771370fb25a16269f91a59a81a99a6a021b8f57ca93d6bb3b3fcecc8dede0ef7914652a2c85d84d774f13a4143536a3f986487a776a2eae
- SSDEEP 192:5WYhWYWWFYg7VWQ4SWSS/njxceXqnajLJ35H:5WYhW4gjmAlnJpH
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-debug-l1-1-0.dll
- Size 11KB
- SHA256 45e48320abe6e3c6079f3f6b84636920a367989a88f9ba6847f88c210d972cf1
- MD5 b0e0678ddc403effc7cdc69ae6d641fb
- SHA1 c1a4ce4ded47740d3518cd1ff9e9ce277d959335
- SHA512 2badf761a0614d09a60d0abb6289ebcbfa3bf69425640eb8494571afd569c8695ae20130aac0e1025e8739d76a9bff2efc9b4358b49efe162b2773be9c3e2ad4
- SSDEEP 192:4WYhWFsWWFYg7VWQ4eWZzAR/BVrqnajcJH:4WYhWFMJRLlA5
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral14
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-errorhandling-l1-1-0.dll
- Size 11KB
- SHA256 accdd7455fb6d02fe298b987ad412e00d0b8e6f5fb10b52826367e7358ae1187
- MD5 94788729c9e7b9c888f4e323a27ab548
- SHA1 b0ba0c4cf1d8b2b94532aa1880310f28e87756ec
- SHA512 ab65495b1d0dd261f2669e04dc18a8da8f837b9ac622fc69fde271ff5e6aa958b1544edd8988f017d3dd83454756812c927a7702b1ed71247e506530a11f21c6
- SSDEEP 192:imxD3vEWYhWnWWFYg7VWQ4eWMOwNbDXbBqnaj0qJm8:iIEWYhWFpLbBlwqJm
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-file-l1-1-0.dll
- Size 14KB
- SHA256 7cb0396229c3da434482a5ef929d3a2c392791712242c9693f06baa78948ef66
- MD5 580d9ea2308fc2d2d2054a79ea63227c
- SHA1 04b3f21cbba6d59a61cd839ae3192ea111856f65
- SHA512 97c1d3f4f9add03f21c6b3517e1d88d1bf9a8733d7bdca1aecba9e238d58ff35780c4d865461cc7cd29e9480b3b3b60864abb664dcdc6f691383d0b281c33369
- SSDEEP 192:+AuVYPvVX8rFTsRWYhWyWWFYg7VWQ4eWQBAW+JSdqnajeMoLR9au:TBPvVXLWYhWiBdlaLFAu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral16
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-file-l1-2-0.dll
- Size 11KB
- SHA256 7a3c5167731238cf262f749aa46ab3bfb2ae1b22191b76e28e1d7499d28c24b7
- MD5 35bc1f1c6fbccec7eb8819178ef67664
- SHA1 bbcad0148ff008e984a75937aaddf1ef6fda5e0c
- SHA512 9ab9b5b12215e57af5b3c588ed5003d978071dc591ed18c78c4563381a132edb7b2c508a8b75b4f1ed8823118d23c88eda453cd4b42b9020463416f8f6832a3d
- SSDEEP 192:dzWYhW1sWWFYg7VWQ4yWL3sQlmqnajlD4h1N:BWYhW2e6l94h1N
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-file-l2-1-0.dll
- Size 11KB
- SHA256 349a79fa1572e3538dfbb942610d8c47d03e8a41b98897bc02ec7e897d05237e
- MD5 3bf4406de02aa148f460e5d709f4f67d
- SHA1 89b28107c39bb216da00507ffd8adb7838d883f6
- SHA512 5ff6e8ad602d9e31ac88e06a6fbb54303c57d011c388f46d957aee8cd3b7d7cced8b6bfa821ff347ade62f7359acb1fba9ee181527f349c03d295bdb74efbace
- SSDEEP 192:/VyWYhWjAWWFYg7VWQ4eWiuNwzNbDXbBqnaj0q:/VyWYhW8g+LbBlwq
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral18
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-handle-l1-1-0.dll
- Size 11KB
- SHA256 c78a1217f8dcb157d1a66b80348da48ebdbbedcea1d487fc393191c05aad476d
- MD5 bbafa10627af6dfae5ed6e4aeae57b2a
- SHA1 3094832b393416f212db9107add80a6e93a37947
- SHA512 d5fcba2314ffe7ff6e8b350d65a2cdd99ca95ea36b71b861733bc1ed6b6bb4d85d4b1c4c4de2769fbf90d4100b343c250347d9ed1425f4a6c3fe6a20aed01f17
- SSDEEP 192:P9RWYhWEWWFYg7VWQ4eWncTjxceXqnajLJS:LWYhWk3TjmAlnJS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-heap-l1-1-0.dll
- Size 11KB
- SHA256 2e981ee04f35c0e0b7c58282b70dcc9fc0318f20f900607dae7a0d40b36e80af
- MD5 3a4b6b36470bad66621542f6d0d153ab
- SHA1 5005454ba8e13bac64189c7a8416ecc1e3834dc6
- SHA512 84b00167abe67f6b58341045012723ef4839c1dfc0d8f7242370c4ad9fabbe4feefe73f9c6f7953eae30422e0e743dc62503a0e8f7449e11c5820f2dfca89294
- SSDEEP 192:5t6DjZlTIWYhWsWWFYg7VWQ4eW4MtkR/BVrqnajc:5t6Dll0WYhWMqkRLlA
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral20
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-interlocked-l1-1-0.dll
- Size 11KB
- SHA256 b02324c49dd039fa889b4647331aa9ac65e5adc0cc06b26f9f086e2654ff9f08
- MD5 a038716d7bbd490378b26642c0c18e94
- SHA1 29cd67219b65339b637a1716a78221915ceb4370
- SHA512 43cb12d715dda4dcdb131d99127417a71a16e4491bc2d5723f63a1c6dfabe578553bc9dc8cf8effae4a6be3e65422ec82079396e9a4d766bf91681bdbd7837b1
- SSDEEP 192:nWYhWNWWFYg7VWQ4uWtGDlR/BVrqnajcU8:nWYhWLJDlRLlAU8
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-libraryloader-l1-1-0.dll
- Size 12KB
- SHA256 08484ed55e43584068c337281e2c577cf984bb504871b3156de11c7cc1eec38f
- MD5 d75144fcb3897425a855a270331e38c9
- SHA1 132c9ade61d574aa318e835eb78c4cccddefdea2
- SHA512 295a6699529d6b173f686c9bbb412f38d646c66aab329eac4c36713fdd32a3728b9c929f9dcadde562f625fb80bc79026a52772141ad2080a0c9797305adff2e
- SSDEEP 192:FvuBL3BBLZWYhWxWWFYg7VWQ4uW4g0jrQYcunYqnajv9Ml:FvuBL3BPWYhWv8jYulhMl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral22
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-localization-l1-2-0.dll
- Size 13KB
- SHA256 059cb23fdcf4d80b92e3da29e9ef4c322edf6fba9a1837978fd983e9bdfc7413
- MD5 8acb83d102dabd9a5017a94239a2b0c6
- SHA1 9b43a40a7b498e02f96107e1524fe2f4112d36ae
- SHA512 b7ecf60e20098ea509b76b1cc308a954a6ede8d836bf709790ce7d4bd1b85b84cf5f3aedf55af225d2d21fbd3065d01aa201dae6c131b8e1e3aa80ed6fc910a4
- SSDEEP 384:NOMw3zdp3bwjGzue9/0jCRrndbwNWYhW6WAulh2:NOMwBprwjGzue9/0jCRrndbw5D
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-memory-l1-1-0.dll
- Size 11KB
- SHA256 dadbd2204b015e81f94c537ac7a36cd39f82d7c366c193062210c7288baa19e3
- MD5 808f1cb8f155e871a33d85510a360e9e
- SHA1 c6251abff887789f1f4fc6b9d85705788379d149
- SHA512 441f36ca196e1c773fadf17a0f64c2bbdc6af22b8756a4a576e6b8469b4267e942571a0ae81f4b2230b8de55702f2e1260e8d0afd5447f2ea52f467f4caa9bc6
- SSDEEP 96:qo1aCFEWYhWwp/DEs39DHDs35FrsvYgmr0DD0ADEs3TDL2L4m2grMWaLNpDEs3OC:teWYhWVWWFYg7VWQ4yWwAKZRqnajl6x7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral24
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-namedpipe-l1-1-0.dll
- Size 11KB
- SHA256 b57e70798af248f91c8c46a3f3b2952effae92ca8ef9640c952467bc6726f363
- MD5 cff476bb11cc50c41d8d3bf5183d07ec
- SHA1 71e0036364fd49e3e535093e665f15e05a3bde8f
- SHA512 7a87e4ee08169e9390d0dfe607e9a220dc7963f9b4c2cdc2f8c33d706e90dc405fbee00ddc4943794fb502d9882b21faae3486bc66b97348121ae665ae58b01c
- SSDEEP 192:cWYhWZSWWFYg7VWQ4eWkcc7ZqnajgnLSp:cWYhW84cllk2p
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-processenvironment-l1-1-0.dll
- Size 12KB
- SHA256 aa415db99828f30a396cbd4e53c94096db89756c88a19d8564f0eed0674add43
- MD5 f43286b695326fc0c20704f0eebfdea6
- SHA1 3e0189d2a1968d7f54e721b1c8949487ef11b871
- SHA512 6ead35348477a08f48a9deb94d26da5f4e4683e36f0a46117b078311235c8b9b40c17259c2671a90d1a210f73bf94c9c063404280ac5dd5c7f9971470beaf8b7
- SSDEEP 192:qKWYhWbWWFYg7VWQ4eWYoWjxceXqnajLJe:qKWYhWJ4WjmAlnJe
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral26
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-processthreads-l1-1-0.dll
- Size 13KB
- SHA256 c9a686030e073975009f993485d362cc31c7f79b683def713e667d13e9605a14
- MD5 e173f3ab46096482c4361378f6dcb261
- SHA1 7922932d87d3e32ce708f071c02fb86d33562530
- SHA512 3aafefd8a9d7b0c869d0c49e0c23086115fd550b7dc5c75a5b8a8620ad37f36a4c24d2bf269043d81a7448c351ff56cb518ec4e151960d4f6bd655c38aff547f
- SSDEEP 192:AWXk1JzX9cKSIvWYhWLWWFYg7VWQ4SWW0uI7oinEqnajxMyqY:AWXk1JzNcKSIvWYhW5+uOEle6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-processthreads-l1-1-1.dll
- Size 11KB
- SHA256 25a99bdf8bf4d16077dc30dd9ffef7bb5a2ceaf9afcee7cf52ad408355239d40
- MD5 9c9b50b204fcb84265810ef1f3c5d70a
- SHA1 0913ab720bd692abcdb18a2609df6a7f85d96db3
- SHA512 ea2d22234e587ad9fa255d9f57907cc14327ead917fdede8b0a38516e7c7a08c4172349c8a7479ec55d1976a37e520628006f5c362f6a3ec76ec87978c4469cd
- SSDEEP 192:NtxDfIeA6WYhW7WWFYg7VWQ4eWpB5ABzR/BVrqnajcb:NtxDfIeA6WYhWp28RLlA
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral28
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-profile-l1-1-0.dll
- Size 10KB
- SHA256 42f4e84073cf876bbab9dd42fd87124a4ba10bb0b59d2c3031cb2b2da7140594
- MD5 0233f97324aaaa048f705d999244bc71
- SHA1 5427d57d0354a103d4bb8b655c31e3189192fc6a
- SHA512 8339f3c0d824204b541aecbd5ad0d72b35eaf6717c3f547e0fd945656bcb2d52e9bd645e14893b3f599ed8f2de6d3bcbebf3b23ed43203599af7afa5a4000311
- SSDEEP 192:clIHyZ36WYhWulWWFYg7VWQ4yWqeQDbLtsQlmqnajlDC:clIHyZKWYhWKhlbp6l9C
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-rtlsupport-l1-1-0.dll
- Size 11KB
- SHA256 02d987eba4a65509a2df8ed5dd0b1a0578966e624fcf5806614ece88a817499f
- MD5 e1ba66696901cf9b456559861f92786e
- SHA1 d28266c7ede971dc875360eb1f5ea8571693603e
- SHA512 08638a0dd0fb6125f4ab56e35d707655f48ae1aa609004329a0e25c13d2e71cb3edb319726f10b8f6d70a99f1e0848b229a37a9ab5427bfee69cd890edfb89d2
- SSDEEP 192:4GeVvXK9WYhW1WWFYg7VWQ4yWj6k50IsQlmqnajlDl:4GeVy9WYhWzVk6l9l
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral30
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-string-l1-1-0.dll
- Size 11KB
- SHA256 9447218cc4ab1a2c012629aaae8d1c8a428a99184b011bcc766792af5891e234
- MD5 7a15b909b6b11a3be6458604b2ff6f5e
- SHA1 0feb824d22b6beeb97bce58225688cb84ac809c7
- SHA512 d01dd566ff906aad2379a46516e6d060855558c3027ce3b991056244a8edd09ce29eacec5ee70ceea326ded7fc2683ae04c87f0e189eba0e1d38c06685b743c9
- SSDEEP 192:byMvQWYhW5fWWFYg7VWQ4eWio3gDwcunYqnajv9JS:byMvQWYhW/BXwulhw
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31
- Target
  Sorillus/jre1.8.0_361/bin/api-ms-win-core-synch-l1-1-0.dll
- Size 13KB
- SHA256 a31a15bed26232a178ba7ecb8c8aa9487c3287bb7909952fc06ed0d2c795db26
- MD5 6c3fcd71a6a1a39eab3e5c2fd72172cd
- SHA1 15b55097e54028d1466e46febca1dbb8dbefea4f
- SHA512 ef1c14965e5974754cc6a9b94a4fa5107e89966cb2e584ce71bbbdd2d9dc0c0536ccc9d488c06fa828d3627206e7d9cc8065c45c6fb0c9121962ccbecb063d4f
- SSDEEP 192:L1dv3V0dfpkXc2MAvVaoKKDWYhWTJWWFYg7VWQ4uWoSUtpwBqnajrmaaGWpmJ:Zdv3V0dfpkXc0vVaeWYhWj/qlQGWpmJ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32