Overview

overview

8

Static

static

7

Release.rar

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Release.zip

  • Size

    3.5MB

  • Sample

    240418-p998aaea43

  • MD5

    2794166c9ddcb72846c4d9967feaffd7

  • SHA1

    1b3878c15a1688a417b3a859dbf36b80f67f945e

  • SHA256

    275ea14a7479b277d772617a5effe9739a0c1fa7884cb1fb82a23c8607bd2b2d

  • SHA512

    785a4613788d608a817056b7cf4d2f5dc826697e1826b0af770c82dcce7e79266d04c0fbc83fa2c223ee410f3ebdba009ba81976cc62c1fe9e74c0a262be4376

  • SSDEEP

    98304:Oh9fwTagPOX93KSEpJdZAnQ2Cw8p1PLiJNM9BLLmvIh8Bf5:O3c7ON3F4PZAQY8DBNoIh8Bx

Score
8/10
agilenetdiscoverypersistence

Malware Config

Targets

    • Target

      Release.zip

    • Size

      3.5MB

    • MD5

      2794166c9ddcb72846c4d9967feaffd7

    • SHA1

      1b3878c15a1688a417b3a859dbf36b80f67f945e

    • SHA256

      275ea14a7479b277d772617a5effe9739a0c1fa7884cb1fb82a23c8607bd2b2d

    • SHA512

      785a4613788d608a817056b7cf4d2f5dc826697e1826b0af770c82dcce7e79266d04c0fbc83fa2c223ee410f3ebdba009ba81976cc62c1fe9e74c0a262be4376

    • SSDEEP

      98304:Oh9fwTagPOX93KSEpJdZAnQ2Cw8p1PLiJNM9BLLmvIh8Bf5:O3c7ON3F4PZAQY8DBNoIh8Bx

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks