a5b239d1bdd4fa0e8e8b6e2a35a0a100a98e30c70a8cbe7ea6dc6733c9b7ab14 | Triage

Sharing

General

Target

a5b239d1bdd4fa0e8e8b6e2a35a0a100a98e30c70a8cbe7ea6dc6733c9b7ab14
Size

42KB
Sample

221012-r6dq1sgab7
MD5

6ec6006ef42bd2a5af3080eaebeeba40
SHA1

146a67653c82665d04c67e767ba8d93f5ba3a5d6
SHA256

a5b239d1bdd4fa0e8e8b6e2a35a0a100a98e30c70a8cbe7ea6dc6733c9b7ab14
SHA512

cc2b98ab9572c2f62f64f99a8b9aa817abdd65e223697fa3f5752511eae01e74e3916a61038a35edb96fcba35757871aaca376f957a26076461bb5a2217996c3
SSDEEP

768:Ml/9K3pz93CK9r57RLpXaCQbcAHqw2v2KP+1K2YlrUO:G9Ip9RTpXarqN+1K2YlrU

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  a5b239d1bdd4fa0e8e8b6e2a35a0a100a98e30c70a8cbe7ea6dc6733c9b7ab14
- Size
  
  42KB
- MD5
  
  6ec6006ef42bd2a5af3080eaebeeba40
- SHA1
  
  146a67653c82665d04c67e767ba8d93f5ba3a5d6
- SHA256
  
  a5b239d1bdd4fa0e8e8b6e2a35a0a100a98e30c70a8cbe7ea6dc6733c9b7ab14
- SHA512
  
  cc2b98ab9572c2f62f64f99a8b9aa817abdd65e223697fa3f5752511eae01e74e3916a61038a35edb96fcba35757871aaca376f957a26076461bb5a2217996c3
- SSDEEP
  
  768:Ml/9K3pz93CK9r57RLpXaCQbcAHqw2v2KP+1K2YlrUO:G9Ip9RTpXarqN+1K2YlrU
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2