Overview

overview

8

Static

static

3

CW.exe

windows7-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CW.eXe

  • Size

    9.0MB

  • Sample

    240413-27zpzsbb69

  • MD5

    6738d790fc0f3928a8a5f19d829cae4d

  • SHA1

    db0a727520178061506c7ec07a99bac581610329

  • SHA256

    60ca507ef4ba7dbbb7ef6ea4b975b9b09a24d7d0c91d38d0876331203f962d98

  • SHA512

    ceacf7ecdf1fa12da540f96592bd7114eb963bab8dc50641c000c1dff74b0b03ee24049df631d6c68ae70d208ff62e3476674f25e2faf5a3a09c9f46555d97b6

  • SSDEEP

    196608:9O1vl2I4a7SdzRDymXLa4mnb0DtUog3jCUE2nKNfMILF9UBDHLSwxT1aQhS:Wt2O7Sd1ymX+4mnOU9+UCZM6kzWu12

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      CW.eXe

    • Size

      9.0MB

    • MD5

      6738d790fc0f3928a8a5f19d829cae4d

    • SHA1

      db0a727520178061506c7ec07a99bac581610329

    • SHA256

      60ca507ef4ba7dbbb7ef6ea4b975b9b09a24d7d0c91d38d0876331203f962d98

    • SHA512

      ceacf7ecdf1fa12da540f96592bd7114eb963bab8dc50641c000c1dff74b0b03ee24049df631d6c68ae70d208ff62e3476674f25e2faf5a3a09c9f46555d97b6

    • SSDEEP

      196608:9O1vl2I4a7SdzRDymXLa4mnb0DtUog3jCUE2nKNfMILF9UBDHLSwxT1aQhS:Wt2O7Sd1ymX+4mnOU9+UCZM6kzWu12

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

1
T1222

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks