9e096f8047a59487e5a3b5f3fd0a978079cb2338ab76c9b57b9f087c203a096e | Triage

Sharing

General

Target

9e096f8047a59487e5a3b5f3fd0a978079cb2338ab76c9b57b9f087c203a096e
Size

103KB
Sample

221003-ctdg6adfgl
MD5

64bd00b9c5f6995ffb6216ada779e180
SHA1

57d0d3231b38e11c420b94880e00cdd6fdaa6d32
SHA256

9e096f8047a59487e5a3b5f3fd0a978079cb2338ab76c9b57b9f087c203a096e
SHA512

c2e5e8c8a1346742a45499bfb83f5f5cb4f2cbe91e23667a25d6dd84f1cb444dbcb6e2a248550eccc115ac7bd017707f956552c738d2db994eeb80e74e281ba0
SSDEEP

1536:ez2KWezrNpfv2cWSFpLWG77ozdIFzskPxp5fu6W4kw7YUP6zhSFvBo9:zK5fWqFIkid7kpTfu7wMcvo

Score

9^/10

discovery persistence

Malware Config

Targets

- Target
  
  9e096f8047a59487e5a3b5f3fd0a978079cb2338ab76c9b57b9f087c203a096e
- Size
  
  103KB
- MD5
  
  64bd00b9c5f6995ffb6216ada779e180
- SHA1
  
  57d0d3231b38e11c420b94880e00cdd6fdaa6d32
- SHA256
  
  9e096f8047a59487e5a3b5f3fd0a978079cb2338ab76c9b57b9f087c203a096e
- SHA512
  
  c2e5e8c8a1346742a45499bfb83f5f5cb4f2cbe91e23667a25d6dd84f1cb444dbcb6e2a248550eccc115ac7bd017707f956552c738d2db994eeb80e74e281ba0
- SSDEEP
  
  1536:ez2KWezrNpfv2cWSFpLWG77ozdIFzskPxp5fu6W4kw7YUP6zhSFvBo9:zK5fWqFIkid7kpTfu7wMcvo
Score

9^/10

discovery persistence
- Contacts a large (2050) amount of remote hosts
  This may indicate a network scan to discover remotely running services.
  discovery
- Registers COM server for autorun
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence