gh0strat | 4e6ff53ffab050c7bbdb6d8c1a4d1cb909f74c76bb00a2d9c24cb6b2e2f0ed9e | Triage

Sharing

General

Target

4e6ff53ffab050c7bbdb6d8c1a4d1cb909f74c76bb00a2d9c24cb6b2e2f0ed9e
Size

114KB
Sample

221003-nb3vwaddgp
MD5

558f912705c3665c3b36bc24da62b1bb
SHA1

5ff62fa68968086ed3758aba62165a3ad1efb060
SHA256

4e6ff53ffab050c7bbdb6d8c1a4d1cb909f74c76bb00a2d9c24cb6b2e2f0ed9e
SHA512

e75ed821d6d495c97e787cdd6fa8c2c010c6d29e566c0371f057d853e80170cdbc3d7967dd6caa9cd8c95542f2ac3ee90ff49ec739b7deb2de46e4864f11ea97
SSDEEP

3072:IdpgMxsdSyg4TvtcMk8Lyzb8ckivlu5KKiCbmN:Mpl2GkGMkSgb8Svlu5KKON

Score

10^/10

gh0strat persistence

Malware Config

Targets

- Target
  
  4e6ff53ffab050c7bbdb6d8c1a4d1cb909f74c76bb00a2d9c24cb6b2e2f0ed9e
- Size
  
  114KB
- MD5
  
  558f912705c3665c3b36bc24da62b1bb
- SHA1
  
  5ff62fa68968086ed3758aba62165a3ad1efb060
- SHA256
  
  4e6ff53ffab050c7bbdb6d8c1a4d1cb909f74c76bb00a2d9c24cb6b2e2f0ed9e
- SHA512
  
  e75ed821d6d495c97e787cdd6fa8c2c010c6d29e566c0371f057d853e80170cdbc3d7967dd6caa9cd8c95542f2ac3ee90ff49ec739b7deb2de46e4864f11ea97
- SSDEEP
  
  3072:IdpgMxsdSyg4TvtcMk8Lyzb8ckivlu5KKiCbmN:Mpl2GkGMkSgb8Svlu5KKON
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2