Overview

overview

7

Static

static

3

Xfer.Recor...CD.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Xfer.Records.Serum.MERRY.CHRISTMAS.&.HAPPY.NEW.YEAR.v1.368-TCD.exe

  • Size

    194.4MB

  • Sample

    240914-sh5ehazenm

  • MD5

    381273258ecb7c0def938463aee39ee5

  • SHA1

    9c1b9ec009b13e1cf010f1c3a02ea216348b08d1

  • SHA256

    7a12beeade43961eb5649dd8118dfb7025767aeab9fcd6418071679247beaebb

  • SHA512

    559e9557b07222ec9e5f3ddb7df557b587178ad969e0e4728cf574bd9357e60f73a856f7dcd965f811ede6548b5fd6ed2b8b1141f994e422c7c7e2d8d8e223c2

  • SSDEEP

    3145728:QFouHlx5rcWFlzaNTX8UXQlTQtziAZtRpbtviMgr70+GgbPOHOHMNP2X0CoG:QxHP5rhmNBl1ZtReMgU+NOHOsNE0CoG

Score
7/10
discovery

Malware Config

Targets

    • Target

      Xfer.Records.Serum.MERRY.CHRISTMAS.&.HAPPY.NEW.YEAR.v1.368-TCD.exe

    • Size

      194.4MB

    • MD5

      381273258ecb7c0def938463aee39ee5

    • SHA1

      9c1b9ec009b13e1cf010f1c3a02ea216348b08d1

    • SHA256

      7a12beeade43961eb5649dd8118dfb7025767aeab9fcd6418071679247beaebb

    • SHA512

      559e9557b07222ec9e5f3ddb7df557b587178ad969e0e4728cf574bd9357e60f73a856f7dcd965f811ede6548b5fd6ed2b8b1141f994e422c7c7e2d8d8e223c2

    • SSDEEP

      3145728:QFouHlx5rcWFlzaNTX8UXQlTQtziAZtRpbtviMgr70+GgbPOHOHMNP2X0CoG:QxHP5rhmNBl1ZtReMgU+NOHOsNE0CoG

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks