Overview

overview

10

Static

static

3

b955636372...f8.exe

windows7-x64

10

b955636372...f8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b95563637221fe424692dfb8a3b7c8ad5d63d95c98d1b3d0294eb70539079ef8

  • Size

    71KB

  • Sample

    240523-csec3aac7z

  • MD5

    726a2949d4ceec179d1c68eaf76baae2

  • SHA1

    fd3c8194b67bf1c8c9d704f5b6c2805b7d43c859

  • SHA256

    b95563637221fe424692dfb8a3b7c8ad5d63d95c98d1b3d0294eb70539079ef8

  • SHA512

    6ed19b388a3d677b57b670096efd75417c115237817c9090049608606bc263c5e1501df53ca95019de37df1604d6f7d2d379b9bf3ed55cfcc71c57ee9a52a18b

  • SSDEEP

    1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl0:Olg35GTslA5t3/w8v

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      b95563637221fe424692dfb8a3b7c8ad5d63d95c98d1b3d0294eb70539079ef8

    • Size

      71KB

    • MD5

      726a2949d4ceec179d1c68eaf76baae2

    • SHA1

      fd3c8194b67bf1c8c9d704f5b6c2805b7d43c859

    • SHA256

      b95563637221fe424692dfb8a3b7c8ad5d63d95c98d1b3d0294eb70539079ef8

    • SHA512

      6ed19b388a3d677b57b670096efd75417c115237817c9090049608606bc263c5e1501df53ca95019de37df1604d6f7d2d379b9bf3ed55cfcc71c57ee9a52a18b

    • SSDEEP

      1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8sl0:Olg35GTslA5t3/w8v

    Score
    10/10
    evasionpersistencetrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

3
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Winlogon Helper DLL

1
T1547.004

Defense Evasion

Impair Defenses

2
T1562

Disable or Modify Tools

2
T1562.001

Modify Registry

5
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks