f5ea4ee79acad0e6d9d7cf90df0341efd283d72f3f17ea5bfc4710ee12466201 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5ea4ee79acad0e6d9d7cf90df0341efd283d72f3f17ea5bfc4710ee12466201
Size

704KB
Sample

221002-npys3sdcg9
MD5

71b24c9f4f3d60ebda2f58c47f315c60
SHA1

d4c218bffe69befaa757c4c895cba5e4f5a2e0f8
SHA256

f5ea4ee79acad0e6d9d7cf90df0341efd283d72f3f17ea5bfc4710ee12466201
SHA512

d2b59fe03c80fd7500ade36d0e0033ad6b344123cc373cc022538b59e2a00c19418311212fb0fef816aa7601df53a5d6babddb6ba2cfc986d705c014aaa268df
SSDEEP

12288:QRObekMtkfohrPUs37uzHnA6zg5cIsalHERjUrNN/RQ9wgUT5EDExyc:6ObekYkfohrP337uzHnA6cHswHE/6gU3

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  f5ea4ee79acad0e6d9d7cf90df0341efd283d72f3f17ea5bfc4710ee12466201
- Size
  
  704KB
- MD5
  
  71b24c9f4f3d60ebda2f58c47f315c60
- SHA1
  
  d4c218bffe69befaa757c4c895cba5e4f5a2e0f8
- SHA256
  
  f5ea4ee79acad0e6d9d7cf90df0341efd283d72f3f17ea5bfc4710ee12466201
- SHA512
  
  d2b59fe03c80fd7500ade36d0e0033ad6b344123cc373cc022538b59e2a00c19418311212fb0fef816aa7601df53a5d6babddb6ba2cfc986d705c014aaa268df
- SSDEEP
  
  12288:QRObekMtkfohrPUs37uzHnA6zg5cIsalHERjUrNN/RQ9wgUT5EDExyc:6ObekYkfohrP337uzHnA6cHswHE/6gU3
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2