43440e9a6d2d0a68b84f7885fda26748fa86de6ca709a883959e2640f3f706bf

Resubmissions

22/11/2021, 13:32

211122-qs2p9afehp10

22/11/2021, 13:27

211122-qp4ensaeg33

Sharing

Copy URL Twitter E-mail

General

Target
5d3fa145fb26c55c03d3c2c48495251e.dll
Size 133KB
Sample211122-qs2p9afehp
SHA256 43440e9a6d2d0a68b84f7885fda26748fa86de6ca709a883959e2640f3f706bf
MD5 5d3fa145fb26c55c03d3c2c48495251e
SHA1 383fb47c582ec9375d03b97746cda9af5b93871e
SHA512 2cc20fc9cef78d7c960882dcb68c1c25ee843de9050795099f5d7d84e4cfabab4afa632ee06a2887530fb19a04b60580b97669a67e8c7b2e97374bf6147c00da
MD5 SHA1 SHA512

Score

10^/10

persistence

Malware Config

Targets

- Target
  5d3fa145fb26c55c03d3c2c48495251e.dll
- Size 133KB
- SHA256 43440e9a6d2d0a68b84f7885fda26748fa86de6ca709a883959e2640f3f706bf
- MD5 5d3fa145fb26c55c03d3c2c48495251e
- SHA1 383fb47c582ec9375d03b97746cda9af5b93871e
- SHA512 2cc20fc9cef78d7c960882dcb68c1c25ee843de9050795099f5d7d84e4cfabab4afa632ee06a2887530fb19a04b60580b97669a67e8c7b2e97374bf6147c00da
- MD5 SHA1 SHA512
Score

10^/10

persistence
- Registers COM server for autorun
  persistence
- Suspicious use of NtCreateProcessExOtherParentProcess
- Drops file in System32 directory
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Registers COM server for autorun

Suspicious use of NtCreateProcessExOtherParentProcess

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7