33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f | Triage

Sharing

General

Target

33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f
Size

305KB
Sample

221011-w7ag7shgel
MD5

771ce1e6f8e9788b51fe95588828d000
SHA1

ebbffb0f64bebbeb30c52c1a7363b87e56a206d7
SHA256

33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f
SHA512

14095fff85155c4b5d29d93a384fd36891b5e713fdb1a68e6b67af81e76a7da88dd11e5fdb008990e7ae1a65499c907f76902a3c4c38bd3c53f4b86914b9480c
SSDEEP

6144:LQ8/321zchSWAO+nI8e4yjFbKPfE819mMBa5Cys/5DyljcP25dCZ7mRqpkl07Ejl:V/3214h9A6gyjFwfY2AjcuK1Hpkl07t0

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f
- Size
  
  305KB
- MD5
  
  771ce1e6f8e9788b51fe95588828d000
- SHA1
  
  ebbffb0f64bebbeb30c52c1a7363b87e56a206d7
- SHA256
  
  33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f
- SHA512
  
  14095fff85155c4b5d29d93a384fd36891b5e713fdb1a68e6b67af81e76a7da88dd11e5fdb008990e7ae1a65499c907f76902a3c4c38bd3c53f4b86914b9480c
- SSDEEP
  
  6144:LQ8/321zchSWAO+nI8e4yjFbKPfE819mMBa5Cys/5DyljcP25dCZ7mRqpkl07Ejl:V/3214h9A6gyjFwfY2AjcuK1Hpkl07t0
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2