b6b70f5bf88eb1efbaa93a033ac48bf0cd552968b3befaa6572ab3c3e009b5d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6b70f5bf88eb1efbaa93a033ac48bf0cd552968b3befaa6572ab3c3e009b5d0
Size

141KB
Sample

221019-tn93lsfcd5
MD5

a217c8d3eb990f52c1f476fc146d9f30
SHA1

c6a911209a409bdc13325e36596d6b997711f753
SHA256

b6b70f5bf88eb1efbaa93a033ac48bf0cd552968b3befaa6572ab3c3e009b5d0
SHA512

dff78d4b91ddd7debe53ad70e2cf4474bb9b1c94bbc082ffb4175f4813a97e3ced86f240544cfe4a77f9064a6ea6bbdc67958bba213a4a061f592f7d98a112e2
SSDEEP

3072:VU+W+qNo3e9Sy/WuRaezPM3K73kuKGGXDlMc:a+WJ9SHuRaezP33kuKGGXDlMc

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b6b70f5bf88eb1efbaa93a033ac48bf0cd552968b3befaa6572ab3c3e009b5d0
- Size
  
  141KB
- MD5
  
  a217c8d3eb990f52c1f476fc146d9f30
- SHA1
  
  c6a911209a409bdc13325e36596d6b997711f753
- SHA256
  
  b6b70f5bf88eb1efbaa93a033ac48bf0cd552968b3befaa6572ab3c3e009b5d0
- SHA512
  
  dff78d4b91ddd7debe53ad70e2cf4474bb9b1c94bbc082ffb4175f4813a97e3ced86f240544cfe4a77f9064a6ea6bbdc67958bba213a4a061f592f7d98a112e2
- SSDEEP
  
  3072:VU+W+qNo3e9Sy/WuRaezPM3K73kuKGGXDlMc:a+WJ9SHuRaezP33kuKGGXDlMc
Score

8^/10

persistence
- Sets file execution options in registry
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2