gh0strat | a6dcb8bd1e01c79a463bc406904b90df57a1f00e80a6763bdef5dbaf66a867fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6dcb8bd1e01c79a463bc406904b90df57a1f00e80a6763bdef5dbaf66a867fe
Size

328KB
Sample

221106-jqcj1sdbap
MD5

11cffc7c89e9dfbc4b2c64c404210250
SHA1

53b80cf31f6a9092a1acf5d33ac9dfa81191ff68
SHA256

a6dcb8bd1e01c79a463bc406904b90df57a1f00e80a6763bdef5dbaf66a867fe
SHA512

9184195afa0d1079c6e48fcc02a207553dbd0d21ab50b1db43405fabcf55e5edda7546c9c9645df0636391a5495a93c86351a54487fdb815690405c950017caa
SSDEEP

6144:ciTtiWB0sL7trJ5pp34OZZ4G7v4G7AWFv9:bXB0sdrrpNttJAe

Score

10^/10

gh0strat persistence

Malware Config

Targets

- Target
  
  a6dcb8bd1e01c79a463bc406904b90df57a1f00e80a6763bdef5dbaf66a867fe
- Size
  
  328KB
- MD5
  
  11cffc7c89e9dfbc4b2c64c404210250
- SHA1
  
  53b80cf31f6a9092a1acf5d33ac9dfa81191ff68
- SHA256
  
  a6dcb8bd1e01c79a463bc406904b90df57a1f00e80a6763bdef5dbaf66a867fe
- SHA512
  
  9184195afa0d1079c6e48fcc02a207553dbd0d21ab50b1db43405fabcf55e5edda7546c9c9645df0636391a5495a93c86351a54487fdb815690405c950017caa
- SSDEEP
  
  6144:ciTtiWB0sL7trJ5pp34OZZ4G7v4G7AWFv9:bXB0sdrrpNttJAe
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2