gh0strat | 57b16adbb0718cfc014002bd383edd1725b9d502dcfccdb0b5705b800a0bede8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57b16adbb0718cfc014002bd383edd1725b9d502dcfccdb0b5705b800a0bede8
Size

192KB
Sample

221002-ndvmaaeban
MD5

437028a01a4c00fdb288affad5b6e12c
SHA1

eb4597ae20c799d10b738e44f41db7afb82b6556
SHA256

57b16adbb0718cfc014002bd383edd1725b9d502dcfccdb0b5705b800a0bede8
SHA512

0c7676884832c558d5545cc8dab56aa6fbc5e1075ec268f48931a6a7a8fdacbb85789b981c4ff997f2bd1c24d1b4dbd5ea533d2acec694fb03dcfa84075bed4d
SSDEEP

3072:ATeTY1km5WBqwP3gspQ/Xz7iasXbyC/hX6xxv3IUt7jEwj:AiTtiWBvmL7tyJ5Mp3Iy5j

Score

10^/10

gh0strat persistence

Malware Config

Targets

- Target
  
  57b16adbb0718cfc014002bd383edd1725b9d502dcfccdb0b5705b800a0bede8
- Size
  
  192KB
- MD5
  
  437028a01a4c00fdb288affad5b6e12c
- SHA1
  
  eb4597ae20c799d10b738e44f41db7afb82b6556
- SHA256
  
  57b16adbb0718cfc014002bd383edd1725b9d502dcfccdb0b5705b800a0bede8
- SHA512
  
  0c7676884832c558d5545cc8dab56aa6fbc5e1075ec268f48931a6a7a8fdacbb85789b981c4ff997f2bd1c24d1b4dbd5ea533d2acec694fb03dcfa84075bed4d
- SSDEEP
  
  3072:ATeTY1km5WBqwP3gspQ/Xz7iasXbyC/hX6xxv3IUt7jEwj:AiTtiWBvmL7tyJ5Mp3Iy5j
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2