0c00bbd8a3c7290cfbe78993a20db5916ddf884d3d069a87fe6f0247b54f1293 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c00bbd8a3c7290cfbe78993a20db5916ddf884d3d069a87fe6f0247b54f1293
Size

186KB
Sample

221011-kbhyxsecam
MD5

6aa4fd6a81fd9bf21ecf88b1f9d616c3
SHA1

d175f7d18559812ced975996749a06622bf3b64c
SHA256

0c00bbd8a3c7290cfbe78993a20db5916ddf884d3d069a87fe6f0247b54f1293
SHA512

db3ec17d8a65168d18df27dc5934f2cf9ec61a3caf174144a03c90a389cabda8fa6728474d2b61d39be5f9883afe9e377373c168e792310a02868ae77e8289de
SSDEEP

3072:nvGzpvQPCOIh1ZPb5cegCN7GYJNrtfORlU22DSDshAoL9VLmb:+1v8CfhbebI7tGg+DKV6

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  0c00bbd8a3c7290cfbe78993a20db5916ddf884d3d069a87fe6f0247b54f1293
- Size
  
  186KB
- MD5
  
  6aa4fd6a81fd9bf21ecf88b1f9d616c3
- SHA1
  
  d175f7d18559812ced975996749a06622bf3b64c
- SHA256
  
  0c00bbd8a3c7290cfbe78993a20db5916ddf884d3d069a87fe6f0247b54f1293
- SHA512
  
  db3ec17d8a65168d18df27dc5934f2cf9ec61a3caf174144a03c90a389cabda8fa6728474d2b61d39be5f9883afe9e377373c168e792310a02868ae77e8289de
- SSDEEP
  
  3072:nvGzpvQPCOIh1ZPb5cegCN7GYJNrtfORlU22DSDshAoL9VLmb:+1v8CfhbebI7tGg+DKV6
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2