Overview

overview

10

Static

static

3

8a80f76c8e...d6.exe

windows7-x64

10

8a80f76c8e...d6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a80f76c8e4abf7b432b631d4772654f8bd17add59d9c5e1c449891ccd9708d6

  • Size

    122KB

  • Sample

    240905-prfkys1bnq

  • MD5

    66e66b12af7f1a241153d48c485327a0

  • SHA1

    7fb62aaefe1c58cb1ee92d7f2c57cac80ab68986

  • SHA256

    8a80f76c8e4abf7b432b631d4772654f8bd17add59d9c5e1c449891ccd9708d6

  • SHA512

    324bc47d93858d0dcc78828f193e8c445d7b88b73709fdd644811682fb3599e34a8b0d8da2971774420d7f7203161ab0390e50807a480e4bcdca800e8d329f97

  • SSDEEP

    1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi46:6u8ANCUdgfmD7zey0KUj6TjR9i46

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      8a80f76c8e4abf7b432b631d4772654f8bd17add59d9c5e1c449891ccd9708d6

    • Size

      122KB

    • MD5

      66e66b12af7f1a241153d48c485327a0

    • SHA1

      7fb62aaefe1c58cb1ee92d7f2c57cac80ab68986

    • SHA256

      8a80f76c8e4abf7b432b631d4772654f8bd17add59d9c5e1c449891ccd9708d6

    • SHA512

      324bc47d93858d0dcc78828f193e8c445d7b88b73709fdd644811682fb3599e34a8b0d8da2971774420d7f7203161ab0390e50807a480e4bcdca800e8d329f97

    • SSDEEP

      1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi46:6u8ANCUdgfmD7zey0KUj6TjR9i46

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1
T1564

Hidden Files and Directories

1
T1564.001

Modify Registry

2
T1112

Credential Access

Discovery

Network Share Discovery

1
T1135

System Information Discovery

1
T1082

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

System Network Configuration Discovery

1
T1016

Internet Connection Discovery

1
T1016.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks