Overview

overview

10

Static

static

1

027cc450ef...45.dll

windows7-x64

10

027cc450ef...45.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745.zip

  • Size

    307KB

  • Sample

    241204-pex98szpek

  • MD5

    36610923ae70ce880523a6c4fe6c0f43

  • SHA1

    08568c510cb0dd0a5ca80c0f53398aef85d78c79

  • SHA256

    e3832a3c24ef7730cadef41252ad535b02d451652e0e0b586719d8b64809d395

  • SHA512

    392b5e291c4b022a39ce1140180f235c6997e001b0c0ccbd1fe59d33a936722032bd3a6cf5ccd14fb62ca40e9c072204ad625972ca1825521ca7ac444b0d1dcb

  • SSDEEP

    6144:TDbdxU3ejuSWj7bC47skjwMVR7uMHVjXYbvJ7/CxOJD5pWjo:XjhjN2OuswmMHVjXYbv9CxOJFP

Score
10/10
mimikatzbootkitdiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745.dll

    • Size

      353KB

    • MD5

      71b6a493388e7d0b40c83ce903bc6b04

    • SHA1

      34f917aaba5684fbe56d3c57d48ef2a1aa7cf06d

    • SHA256

      027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745

    • SHA512

      072205eca5099d9269f358fe534b370ff21a4f12d7938d6d2e2713f69310f0698e53b8aff062849f0b2a521f68bee097c1840993825d2a5a3aa8cf4145911c6f

    • SSDEEP

      6144:y/Bt80VmNTBo/x95ZjAetGDN3VFNq7pC+9OqFoK30b3ni5rdQY/CdUOs2:y/X4NTS/x9jNG+w+9OqFoK323qdQYKUG

    Score
    10/10
    mimikatzbootkitdiscoverypersistencespywarestealer

    • Mimikatz

      mimikatz is an open source tool to dump credentials on Windows.

      mimikatz

    • Mimikatz family

      mimikatz

    • mimikatz is an open source tool to dump credentials on Windows

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks