58a249d20c9cb84084a1aa9e221fadff6ff2b6b0ebd81cfea14b667f9dc0c919 | Triage

Sharing

General

Target

58a249d20c9cb84084a1aa9e221fadff6ff2b6b0ebd81cfea14b667f9dc0c919
Size

206KB
Sample

221011-d9k3lsdab2
MD5

619b2bb8b28523fc1c12f6d2c9f2c270
SHA1

6b037d0977a4309f99f66796084e8fc8eb3028d4
SHA256

58a249d20c9cb84084a1aa9e221fadff6ff2b6b0ebd81cfea14b667f9dc0c919
SHA512

87611f46cca1d5bb50bf32acf667909cd2cd1379c39faad534bec927dd62351cb260ba989058b3d69e98696478fd1afaa4abedc5806ae7bf7d0bee315eaac866
SSDEEP

6144:GByL0NrMTObdBq6tsR7rQxFm1u5Gk6R9z:wXhBqvVcG1LkY9z

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  58a249d20c9cb84084a1aa9e221fadff6ff2b6b0ebd81cfea14b667f9dc0c919
- Size
  
  206KB
- MD5
  
  619b2bb8b28523fc1c12f6d2c9f2c270
- SHA1
  
  6b037d0977a4309f99f66796084e8fc8eb3028d4
- SHA256
  
  58a249d20c9cb84084a1aa9e221fadff6ff2b6b0ebd81cfea14b667f9dc0c919
- SHA512
  
  87611f46cca1d5bb50bf32acf667909cd2cd1379c39faad534bec927dd62351cb260ba989058b3d69e98696478fd1afaa4abedc5806ae7bf7d0bee315eaac866
- SSDEEP
  
  6144:GByL0NrMTObdBq6tsR7rQxFm1u5Gk6R9z:wXhBqvVcG1LkY9z
Score

8^/10

persistence
- Executes dropped EXE
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2