4746e4d325b2205314a670acdee1b3a8052d91a4680745a686ca6622e6357fcf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4746e4d325b2205314a670acdee1b3a8052d91a4680745a686ca6622e6357fcf
Size

732KB
Sample

221006-xj1j6aaeel
MD5

0411735e147bec9ee6e1c06b90bd4889
SHA1

bdd01e4f000e074e6f5a3824e868b9de70b4b906
SHA256

4746e4d325b2205314a670acdee1b3a8052d91a4680745a686ca6622e6357fcf
SHA512

c8271bee84a93c78278305c939473a510a71fa00dce46431cac835b6fa7664336fb0b4f34025b8073c6d4924784e229d94ed221ef802fe4408dbd82657ad6c4c
SSDEEP

768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  4746e4d325b2205314a670acdee1b3a8052d91a4680745a686ca6622e6357fcf
- Size
  
  732KB
- MD5
  
  0411735e147bec9ee6e1c06b90bd4889
- SHA1
  
  bdd01e4f000e074e6f5a3824e868b9de70b4b906
- SHA256
  
  4746e4d325b2205314a670acdee1b3a8052d91a4680745a686ca6622e6357fcf
- SHA512
  
  c8271bee84a93c78278305c939473a510a71fa00dce46431cac835b6fa7664336fb0b4f34025b8073c6d4924784e229d94ed221ef802fe4408dbd82657ad6c4c
- SSDEEP
  
  768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR
Score

8^/10

persistence
- Downloads MZ/PE file
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Web Service

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1