ratty | fac977e2483a0e3553bf96af6ba237515f5ab9b73ac4236c31fca380898dd884 | Triage

Sharing

General

Target

fac977e2483a0e3553bf96af6ba237515f5ab9b73ac4236c31fca380898dd884
Size

155KB
Sample

220520-d55lfsagfm
MD5

461b72110996d3d4a0a9451c2b17c491
SHA1

fd78d3f3c71fe9a707110116a9e0c4d1e80b958d
SHA256

fac977e2483a0e3553bf96af6ba237515f5ab9b73ac4236c31fca380898dd884
SHA512

4600045e059373b5f5e434d8459eb7d01fb9dd44b480dfe3cd16a15f6d8bb3c19aa7d473f4a4b775b59081ee39b709e75e7c05abbe1066d5a7f9c7c2e1ef60c5

Score

10^/10

ratty persistence

Malware Config

Targets

- Target
  
  fac977e2483a0e3553bf96af6ba237515f5ab9b73ac4236c31fca380898dd884
- Size
  
  155KB
- MD5
  
  461b72110996d3d4a0a9451c2b17c491
- SHA1
  
  fd78d3f3c71fe9a707110116a9e0c4d1e80b958d
- SHA256
  
  fac977e2483a0e3553bf96af6ba237515f5ab9b73ac4236c31fca380898dd884
- SHA512
  
  4600045e059373b5f5e434d8459eb7d01fb9dd44b480dfe3cd16a15f6d8bb3c19aa7d473f4a4b775b59081ee39b709e75e7c05abbe1066d5a7f9c7c2e1ef60c5
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2