c12a716bb121aabc3e32c0586e3814375b2582a2c42360a5063782c6bbad4132 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c12a716bb121aabc3e32c0586e3814375b2582a2c42360a5063782c6bbad4132
Size

732KB
Sample

221008-fj1fqaecfq
MD5

d04c29bee70669c81118d46285f6f8d6
SHA1

114d776b595aaab3dc2a32821afc19517a92f487
SHA256

c12a716bb121aabc3e32c0586e3814375b2582a2c42360a5063782c6bbad4132
SHA512

4dac430a297074db5d78a49da25cafbbf056f2f64ec42d9e92ef4aa3493a4b47b3cddaef5e3bd9b52eada3a1d10d813afc891fff0fd502d3d95ef35335bd8f42
SSDEEP

768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  c12a716bb121aabc3e32c0586e3814375b2582a2c42360a5063782c6bbad4132
- Size
  
  732KB
- MD5
  
  d04c29bee70669c81118d46285f6f8d6
- SHA1
  
  114d776b595aaab3dc2a32821afc19517a92f487
- SHA256
  
  c12a716bb121aabc3e32c0586e3814375b2582a2c42360a5063782c6bbad4132
- SHA512
  
  4dac430a297074db5d78a49da25cafbbf056f2f64ec42d9e92ef4aa3493a4b47b3cddaef5e3bd9b52eada3a1d10d813afc891fff0fd502d3d95ef35335bd8f42
- SSDEEP
  
  768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR
Score

8^/10

persistence
- Downloads MZ/PE file
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Web Service

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1