56a5dfe870b97321288c7c31d589db2f2d1d0971fdae38c4470a0f609e29cd97 | Triage

Sharing

General

Target

56a5dfe870b97321288c7c31d589db2f2d1d0971fdae38c4470a0f609e29cd97
Size

331KB
Sample

221019-2sxxvabgg9
MD5

a21afcbb38a68ba46e76d99dc2f82ec0
SHA1

a21106247d6d545158e66b739138301c0185b174
SHA256

56a5dfe870b97321288c7c31d589db2f2d1d0971fdae38c4470a0f609e29cd97
SHA512

8ecb28a2a24f91cf8f8d72bac6f8ea24a166f9d534d736de430ebd32b092f4f2762a6e23a5e79f533e0e1bd8c5e57bf6e13a02079249216a6e6235e2ce9474ae
SSDEEP

6144:+0gVC0TeKb8ug2h+guJE8BpImwxaRAaC6XrgIHYH:+0KFTNs2szJImfAaCSHYH

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  56a5dfe870b97321288c7c31d589db2f2d1d0971fdae38c4470a0f609e29cd97
- Size
  
  331KB
- MD5
  
  a21afcbb38a68ba46e76d99dc2f82ec0
- SHA1
  
  a21106247d6d545158e66b739138301c0185b174
- SHA256
  
  56a5dfe870b97321288c7c31d589db2f2d1d0971fdae38c4470a0f609e29cd97
- SHA512
  
  8ecb28a2a24f91cf8f8d72bac6f8ea24a166f9d534d736de430ebd32b092f4f2762a6e23a5e79f533e0e1bd8c5e57bf6e13a02079249216a6e6235e2ce9474ae
- SSDEEP
  
  6144:+0gVC0TeKb8ug2h+guJE8BpImwxaRAaC6XrgIHYH:+0KFTNs2szJImfAaCSHYH
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2