4cf2a7bd6a97fad0166c25aee570e244757c4bfba0039ae2d02e85e5269cdd5b | Triage

Sharing

General

Target

4cf2a7bd6a97fad0166c25aee570e244757c4bfba0039ae2d02e85e5269cdd5b
Size

230KB
Sample

221014-lefteahcc9
MD5

60179acd086bec35e71a8df669255853
SHA1

62425d41e2f4573d08031e9cdc599f288a795cee
SHA256

4cf2a7bd6a97fad0166c25aee570e244757c4bfba0039ae2d02e85e5269cdd5b
SHA512

787b93345f9ce53692489f5cb1845a33dcc07a02a009a0807e721cfbd78e98e6f9e1763863d7968c416f05e0bc13468daa362a1eb36a75a76659a8e39e4c4560
SSDEEP

6144:13bzWyYYjjZvxZCbM+ol3c1aoXQEJwggui3:BbayYYjjZpZyQ3toXX7gv

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  4cf2a7bd6a97fad0166c25aee570e244757c4bfba0039ae2d02e85e5269cdd5b
- Size
  
  230KB
- MD5
  
  60179acd086bec35e71a8df669255853
- SHA1
  
  62425d41e2f4573d08031e9cdc599f288a795cee
- SHA256
  
  4cf2a7bd6a97fad0166c25aee570e244757c4bfba0039ae2d02e85e5269cdd5b
- SHA512
  
  787b93345f9ce53692489f5cb1845a33dcc07a02a009a0807e721cfbd78e98e6f9e1763863d7968c416f05e0bc13468daa362a1eb36a75a76659a8e39e4c4560
- SSDEEP
  
  6144:13bzWyYYjjZvxZCbM+ol3c1aoXQEJwggui3:BbayYYjjZpZyQ3toXX7gv
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2