de7f87d3ee5f28fedabfbf872096c09fb42a2a5fc4e21eb687003220fe97bcc4 | Triage

Sharing

General

Target

de7f87d3ee5f28fedabfbf872096c09fb42a2a5fc4e21eb687003220fe97bcc4
Size

76KB
Sample

221030-shhkqsgdgn
MD5

8269b2e99816c84bf9030391c76bed00
SHA1

d591faa331b12582670fd396461c969d58f6baa7
SHA256

de7f87d3ee5f28fedabfbf872096c09fb42a2a5fc4e21eb687003220fe97bcc4
SHA512

ff073ed550ad2d2f1ce85f980e05ad9bbbae81a2705ceda6ec8f216edaa34eb6ef89f2b26c3f7595d1b2fd157bfeb05798388ff3b43f3c6b4d8f507652cc0bad
SSDEEP

1536:IJquUaZikaSckp8w9jFmz8POOxfnBIIMPkkWr37/XcLs:sukdSw9jaTOpGbyv/Xcg

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  de7f87d3ee5f28fedabfbf872096c09fb42a2a5fc4e21eb687003220fe97bcc4
- Size
  
  76KB
- MD5
  
  8269b2e99816c84bf9030391c76bed00
- SHA1
  
  d591faa331b12582670fd396461c969d58f6baa7
- SHA256
  
  de7f87d3ee5f28fedabfbf872096c09fb42a2a5fc4e21eb687003220fe97bcc4
- SHA512
  
  ff073ed550ad2d2f1ce85f980e05ad9bbbae81a2705ceda6ec8f216edaa34eb6ef89f2b26c3f7595d1b2fd157bfeb05798388ff3b43f3c6b4d8f507652cc0bad
- SSDEEP
  
  1536:IJquUaZikaSckp8w9jFmz8POOxfnBIIMPkkWr37/XcLs:sukdSw9jaTOpGbyv/Xcg
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2