c8563a00f211774be302c6a60493f047096ab523b3aa5adfb2abb89e1ab8c888 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8563a00f211774be302c6a60493f047096ab523b3aa5adfb2abb89e1ab8c888
Size

112KB
Sample

221019-tbcxcaeeg5
MD5

90cae78128a14767870a9f653fe90f40
SHA1

31e18c5ab48d53aefc905163dce7e6fc2624ab39
SHA256

c8563a00f211774be302c6a60493f047096ab523b3aa5adfb2abb89e1ab8c888
SHA512

6b3a7f3d2e4b75bb0c67b1978236a7a1749aec47d72312c42887a49057f7e53a2b4bd11b0f0cb4b5d3619a64501de3d490bc72041217c578bea7aba89f52c81b
SSDEEP

1536:vmDqm1sOwNkYRMAEpQHljqHwisgc21+06Iygz7qfG5CffTpfHAS:vc1twfaAeQ4Hw9gc21+06IPkACxHAS

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  c8563a00f211774be302c6a60493f047096ab523b3aa5adfb2abb89e1ab8c888
- Size
  
  112KB
- MD5
  
  90cae78128a14767870a9f653fe90f40
- SHA1
  
  31e18c5ab48d53aefc905163dce7e6fc2624ab39
- SHA256
  
  c8563a00f211774be302c6a60493f047096ab523b3aa5adfb2abb89e1ab8c888
- SHA512
  
  6b3a7f3d2e4b75bb0c67b1978236a7a1749aec47d72312c42887a49057f7e53a2b4bd11b0f0cb4b5d3619a64501de3d490bc72041217c578bea7aba89f52c81b
- SSDEEP
  
  1536:vmDqm1sOwNkYRMAEpQHljqHwisgc21+06Iygz7qfG5CffTpfHAS:vc1twfaAeQ4Hw9gc21+06IPkACxHAS
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2