Overview

overview

7

Static

static

3

8db8acad2b...22.exe

windows7-x64

7

8db8acad2b...22.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8db8acad2b6ec933a7de5dd9569cc9f04b77f9ad804c2635dfa9c69daad3c822

  • Size

    94KB

  • Sample

    240522-deq1daac4s

  • MD5

    7afd2e97348f8c0d00a50f0036650a37

  • SHA1

    a430610ed09b9a76fb2f3fe5c30097ddc58d91f3

  • SHA256

    8db8acad2b6ec933a7de5dd9569cc9f04b77f9ad804c2635dfa9c69daad3c822

  • SHA512

    01f347caa4f6907530ea953af26ca2607fb2fc332e3d8eb3e7f41b76137f87b5c1f8ee2427c2f0dc3ece210b4a0a0736f9d5596fd36599c898f568f45e3fb020

  • SSDEEP

    1536:tF0AJELoJHG9qa+oa33KJJzAKWYr0v7iJSzIRXKTzRZICrWaGZh7O:tiAyLN9qa+oEGrWViJSzIR6JJrWNZE

Score
7/10
persistence

Malware Config

Targets

    • Target

      8db8acad2b6ec933a7de5dd9569cc9f04b77f9ad804c2635dfa9c69daad3c822

    • Size

      94KB

    • MD5

      7afd2e97348f8c0d00a50f0036650a37

    • SHA1

      a430610ed09b9a76fb2f3fe5c30097ddc58d91f3

    • SHA256

      8db8acad2b6ec933a7de5dd9569cc9f04b77f9ad804c2635dfa9c69daad3c822

    • SHA512

      01f347caa4f6907530ea953af26ca2607fb2fc332e3d8eb3e7f41b76137f87b5c1f8ee2427c2f0dc3ece210b4a0a0736f9d5596fd36599c898f568f45e3fb020

    • SSDEEP

      1536:tF0AJELoJHG9qa+oa33KJJzAKWYr0v7iJSzIRXKTzRZICrWaGZh7O:tiAyLN9qa+oEGrWViJSzIR6JJrWNZE

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks