c193956bb608508faca3fa096da05ef1851f3470f15189c343008cdd29ef3ae0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c193956bb608508faca3fa096da05ef1851f3470f15189c343008cdd29ef3ae0
Size

320KB
Sample

220919-wd3lwsbah5
MD5

c7e191ecd724cc6d835af4d23709fe4a
SHA1

af14d0e827a4a7757ecc30677220247eba0e3dca
SHA256

c193956bb608508faca3fa096da05ef1851f3470f15189c343008cdd29ef3ae0
SHA512

2da231b6a386cea21f6c284bedacaaccee837db0d6a58ea6ed41d8737c9c22987b15d2b9721286af1f2068cda9e162a05a2d6133c84e6354e8bd3dcfb6c85287
SSDEEP

6144:xg664lkw/7HuYVPjcdD1sUeUGSLbdYNPsFysVfEpovN0y875u7Rx:K4lxqkPI1xe26PKhEUN0J4Rx

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  c193956bb608508faca3fa096da05ef1851f3470f15189c343008cdd29ef3ae0
- Size
  
  320KB
- MD5
  
  c7e191ecd724cc6d835af4d23709fe4a
- SHA1
  
  af14d0e827a4a7757ecc30677220247eba0e3dca
- SHA256
  
  c193956bb608508faca3fa096da05ef1851f3470f15189c343008cdd29ef3ae0
- SHA512
  
  2da231b6a386cea21f6c284bedacaaccee837db0d6a58ea6ed41d8737c9c22987b15d2b9721286af1f2068cda9e162a05a2d6133c84e6354e8bd3dcfb6c85287
- SSDEEP
  
  6144:xg664lkw/7HuYVPjcdD1sUeUGSLbdYNPsFysVfEpovN0y875u7Rx:K4lxqkPI1xe26PKhEUN0J4Rx
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2