aa0d96982544e9179d0f2c4ed89977f1c7a4c5c68ef1df38f36cc31f6315d303 | Triage

Sharing

General

Target

aa0d96982544e9179d0f2c4ed89977f1c7a4c5c68ef1df38f36cc31f6315d303
Size

246KB
Sample

221002-ptbd1sgffm
MD5

46fde05dabc1ab5b496b9eab0ce75eb1
SHA1

17ee6a1974dc00ccc1be8f4b0f9d04373317b62a
SHA256

aa0d96982544e9179d0f2c4ed89977f1c7a4c5c68ef1df38f36cc31f6315d303
SHA512

27dc1258ec8bf7b4513ddd4badb12201eadfa1c94182a8312c426a1c4debf8b092c083f5fd5676ac0a64d910cfeb2e1ac154e1d93c6c536ef0950f34914519ea
SSDEEP

6144:E9AcSqn006eGoxcyvJHugXYXh5unBqUAaB5C2PtlYZd:Ef6eGoqQ1I7m/TPgH

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  aa0d96982544e9179d0f2c4ed89977f1c7a4c5c68ef1df38f36cc31f6315d303
- Size
  
  246KB
- MD5
  
  46fde05dabc1ab5b496b9eab0ce75eb1
- SHA1
  
  17ee6a1974dc00ccc1be8f4b0f9d04373317b62a
- SHA256
  
  aa0d96982544e9179d0f2c4ed89977f1c7a4c5c68ef1df38f36cc31f6315d303
- SHA512
  
  27dc1258ec8bf7b4513ddd4badb12201eadfa1c94182a8312c426a1c4debf8b092c083f5fd5676ac0a64d910cfeb2e1ac154e1d93c6c536ef0950f34914519ea
- SSDEEP
  
  6144:E9AcSqn006eGoxcyvJHugXYXh5unBqUAaB5C2PtlYZd:Ef6eGoqQ1I7m/TPgH
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2