Overview

overview

9

Static

static

9

4774842861...ae.exe

windows7-x64

9

4774842861...ae.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    477484286161223da65e75036d86bb3712c0e322258f174e2f74cc2cdccd4dae

  • Size

    3.0MB

  • Sample

    240529-12hc3sce49

  • MD5

    349b58ac22ceee7a2d9f5becb6b68ae1

  • SHA1

    c4e2f6de987d2dad58305490b758ed8b71820f74

  • SHA256

    477484286161223da65e75036d86bb3712c0e322258f174e2f74cc2cdccd4dae

  • SHA512

    a9e3f169477cac925731509f99b9dd18a117a149fabb62c1458c9104edaf5fe39631da2a8ae2ab513d47f1d515c574324a24e14dcd3fe812437b4564209ddcd4

  • SSDEEP

    98304:/A8h1iV9lP9Wp24uD3+s7/ilFH47zSHOrv:/A80P9o24SDWB47zS+v

Score
9/10
cryptonepacker

Malware Config

Targets

    • Target

      477484286161223da65e75036d86bb3712c0e322258f174e2f74cc2cdccd4dae

    • Size

      3.0MB

    • MD5

      349b58ac22ceee7a2d9f5becb6b68ae1

    • SHA1

      c4e2f6de987d2dad58305490b758ed8b71820f74

    • SHA256

      477484286161223da65e75036d86bb3712c0e322258f174e2f74cc2cdccd4dae

    • SHA512

      a9e3f169477cac925731509f99b9dd18a117a149fabb62c1458c9104edaf5fe39631da2a8ae2ab513d47f1d515c574324a24e14dcd3fe812437b4564209ddcd4

    • SSDEEP

      98304:/A8h1iV9lP9Wp24uD3+s7/ilFH47zSHOrv:/A80P9o24SDWB47zS+v

    Score
    9/10
    cryptonepacker

    • CryptOne packer

      Detects CryptOne packer defined in NCC blogpost.

      cryptonepacker

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks