cee0eb94bf42df0d5b827d8b4bbb7051040895110dd679b4a3bc9b542f40b8da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cee0eb94bf42df0d5b827d8b4bbb7051040895110dd679b4a3bc9b542f40b8da
Size

2.1MB
Sample

221104-d1dbeaagb7
MD5

cd7d42413d00ec74b9f0f147e02ab545
SHA1

82e17fe809dcab3353bcca8ca7113bf0548a9e78
SHA256

cee0eb94bf42df0d5b827d8b4bbb7051040895110dd679b4a3bc9b542f40b8da
SHA512

33be4e15e8cdc3c2e83b53329d08cc80ab15936fe4bc5b97a35b9191321d0fe2af57c5d08c2c211b498bded9326f9847ea7100adeea51185dd918a827b362bed
SSDEEP

24576:xsRxc6xa3Wkc8IixyVla+0I79QyBccM0tqsfOf7P9kIWsFy:2Rba3WqOa+0IhNa0ti7PrWK

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  cee0eb94bf42df0d5b827d8b4bbb7051040895110dd679b4a3bc9b542f40b8da
- Size
  
  2.1MB
- MD5
  
  cd7d42413d00ec74b9f0f147e02ab545
- SHA1
  
  82e17fe809dcab3353bcca8ca7113bf0548a9e78
- SHA256
  
  cee0eb94bf42df0d5b827d8b4bbb7051040895110dd679b4a3bc9b542f40b8da
- SHA512
  
  33be4e15e8cdc3c2e83b53329d08cc80ab15936fe4bc5b97a35b9191321d0fe2af57c5d08c2c211b498bded9326f9847ea7100adeea51185dd918a827b362bed
- SSDEEP
  
  24576:xsRxc6xa3Wkc8IixyVla+0I79QyBccM0tqsfOf7P9kIWsFy:2Rba3WqOa+0IhNa0ti7PrWK
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2