50ba6397fbdda50e8078d924aec2bf8fdba3f2dca8a19c4620cfd25f783be94a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50ba6397fbdda50e8078d924aec2bf8fdba3f2dca8a19c4620cfd25f783be94a
Size

32KB
Sample

221106-qvkjrafgaq
MD5

0e435cc05b0ee2fc8426d3c157ffa911
SHA1

abbed021f36706c4de3ee045b99284ebb628c104
SHA256

50ba6397fbdda50e8078d924aec2bf8fdba3f2dca8a19c4620cfd25f783be94a
SHA512

e79181928d075169e6a290fa947c3f8f5a43eae026e0407dbac91976be33650edefacdcac0d4304012315ca38ed2459cefd2ad832f29a4959fa341f01e82dc49
SSDEEP

384:PsR2tNIfqCcNx4oJ8YgXePwUdE9rYD9SWk:PsItNIfqCEwYguPTOrisW

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  50ba6397fbdda50e8078d924aec2bf8fdba3f2dca8a19c4620cfd25f783be94a
- Size
  
  32KB
- MD5
  
  0e435cc05b0ee2fc8426d3c157ffa911
- SHA1
  
  abbed021f36706c4de3ee045b99284ebb628c104
- SHA256
  
  50ba6397fbdda50e8078d924aec2bf8fdba3f2dca8a19c4620cfd25f783be94a
- SHA512
  
  e79181928d075169e6a290fa947c3f8f5a43eae026e0407dbac91976be33650edefacdcac0d4304012315ca38ed2459cefd2ad832f29a4959fa341f01e82dc49
- SSDEEP
  
  384:PsR2tNIfqCcNx4oJ8YgXePwUdE9rYD9SWk:PsItNIfqCEwYguPTOrisW
Score

8^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2