def22cfc787e93dea23b878f6156132c4e2e2d5bf9cd9d806e181cd5c4248918 | Triage

Sharing

General

Target

def22cfc787e93dea23b878f6156132c4e2e2d5bf9cd9d806e181cd5c4248918
Size

569KB
Sample

221020-g3gcmahcal
MD5

802d564c270943565360ab3058c6a690
SHA1

d8bda2148e740579c96ebe2421b63f5d692c2c1d
SHA256

def22cfc787e93dea23b878f6156132c4e2e2d5bf9cd9d806e181cd5c4248918
SHA512

a499d4c88ede8491a731860c53922fc1083c29083fec8b6fcbab27cc1cd92faf57e4b7269be1a58cdf155821f23f0ff66a3737b2de5905810f01db91d7cae877
SSDEEP

12288:ji8l1vGkvn6WIi9aDhoFPp37jtHslw7QS27dNTac:e8dd6WIioDh+PzMlAuDTv

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  def22cfc787e93dea23b878f6156132c4e2e2d5bf9cd9d806e181cd5c4248918
- Size
  
  569KB
- MD5
  
  802d564c270943565360ab3058c6a690
- SHA1
  
  d8bda2148e740579c96ebe2421b63f5d692c2c1d
- SHA256
  
  def22cfc787e93dea23b878f6156132c4e2e2d5bf9cd9d806e181cd5c4248918
- SHA512
  
  a499d4c88ede8491a731860c53922fc1083c29083fec8b6fcbab27cc1cd92faf57e4b7269be1a58cdf155821f23f0ff66a3737b2de5905810f01db91d7cae877
- SSDEEP
  
  12288:ji8l1vGkvn6WIi9aDhoFPp37jtHslw7QS27dNTac:e8dd6WIioDh+PzMlAuDTv
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2