a10e9790938b6386a96eb24d15bf934bc529ae50b0bcbb938a5b4f41e8d4180f | Triage

Sharing

General

Target

a10e9790938b6386a96eb24d15bf934bc529ae50b0bcbb938a5b4f41e8d4180f
Size

127KB
Sample

221019-tpggpafce4
MD5

a0efbcf348688514d8209717d17ad260
SHA1

e091c4a5dd1c491f54aecadc0223125cc2b57bb1
SHA256

a10e9790938b6386a96eb24d15bf934bc529ae50b0bcbb938a5b4f41e8d4180f
SHA512

7211a33cc035097c54beeb979accd238fbd0201950c9b065ec92c78bb340f530bae7b109307da2424cf4cf8be69725f3d74c9968beecabbe3fa8c80d05005278
SSDEEP

3072:VU+W+qNo3e9Sy/WuRaezPM3K73DIIBJky:a+WJ9SHuRaezP33My

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  a10e9790938b6386a96eb24d15bf934bc529ae50b0bcbb938a5b4f41e8d4180f
- Size
  
  127KB
- MD5
  
  a0efbcf348688514d8209717d17ad260
- SHA1
  
  e091c4a5dd1c491f54aecadc0223125cc2b57bb1
- SHA256
  
  a10e9790938b6386a96eb24d15bf934bc529ae50b0bcbb938a5b4f41e8d4180f
- SHA512
  
  7211a33cc035097c54beeb979accd238fbd0201950c9b065ec92c78bb340f530bae7b109307da2424cf4cf8be69725f3d74c9968beecabbe3fa8c80d05005278
- SSDEEP
  
  3072:VU+W+qNo3e9Sy/WuRaezPM3K73DIIBJky:a+WJ9SHuRaezP33My
Score

8^/10

persistence
- Sets file execution options in registry
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2