gh0strat | 39ca258c8b0af3c93933480d098113ace7d5f23aaefb40c811e13cc25eaffcf7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39ca258c8b0af3c93933480d098113ace7d5f23aaefb40c811e13cc25eaffcf7
Size

204KB
Sample

220919-y2ewvafgg8
MD5

8dfdf9a1a805ee09c73659842c3d75c4
SHA1

0c9dfd322d38f57fe3c7066b7ca8650ac90202bb
SHA256

39ca258c8b0af3c93933480d098113ace7d5f23aaefb40c811e13cc25eaffcf7
SHA512

813f0d6c4446ec10cadb29774fdba0306afa1a2e9ed390960251ee56e42c17647e1a66a03c8fcd49d2a5034a4d4dacd75e4a6a6b1dd4e694ce1a8874be017a9b
SSDEEP

3072:8qVYtrjsN9NhlcOAeT4WWDQ8KKwirALVd8R1ttfH3J2ex:5KtnsN9Nvc6DWECwyGX8R1P3N

Score

10^/10

gh0strat persistence

Malware Config

Targets

- Target
  
  39ca258c8b0af3c93933480d098113ace7d5f23aaefb40c811e13cc25eaffcf7
- Size
  
  204KB
- MD5
  
  8dfdf9a1a805ee09c73659842c3d75c4
- SHA1
  
  0c9dfd322d38f57fe3c7066b7ca8650ac90202bb
- SHA256
  
  39ca258c8b0af3c93933480d098113ace7d5f23aaefb40c811e13cc25eaffcf7
- SHA512
  
  813f0d6c4446ec10cadb29774fdba0306afa1a2e9ed390960251ee56e42c17647e1a66a03c8fcd49d2a5034a4d4dacd75e4a6a6b1dd4e694ce1a8874be017a9b
- SSDEEP
  
  3072:8qVYtrjsN9NhlcOAeT4WWDQ8KKwirALVd8R1ttfH3J2ex:5KtnsN9Nvc6DWECwyGX8R1P3N
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2