ae117a81d595bafbfd989a6cea283cae9b4fff75960f2d73ed2539adbc2b3b6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae117a81d595bafbfd989a6cea283cae9b4fff75960f2d73ed2539adbc2b3b6c
Size

198KB
Sample

221106-x8w82abeej
MD5

034a4f8fde7d761e2f4f96be43ebae40
SHA1

4c3ddb3a1fbd19f050ba1b613fcb1d0569e66979
SHA256

ae117a81d595bafbfd989a6cea283cae9b4fff75960f2d73ed2539adbc2b3b6c
SHA512

80b5cd37ddcfaa597bd0e1986fc6ec0489eec4d73f04705775490d25b0aa91bd997fd936364a3734cebafdaadbe42f81b65bb68f370845394b76ca040234a7b2
SSDEEP

3072:HBI5ArKGCnhgU1XA+ArXjeaMoh6lgUaVwQ+/76bSSN+PS7VyoCeJ6ikd+u26LOUp:HK5ArKjbAxXSaegUqGeGpBohMoK

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  ae117a81d595bafbfd989a6cea283cae9b4fff75960f2d73ed2539adbc2b3b6c
- Size
  
  198KB
- MD5
  
  034a4f8fde7d761e2f4f96be43ebae40
- SHA1
  
  4c3ddb3a1fbd19f050ba1b613fcb1d0569e66979
- SHA256
  
  ae117a81d595bafbfd989a6cea283cae9b4fff75960f2d73ed2539adbc2b3b6c
- SHA512
  
  80b5cd37ddcfaa597bd0e1986fc6ec0489eec4d73f04705775490d25b0aa91bd997fd936364a3734cebafdaadbe42f81b65bb68f370845394b76ca040234a7b2
- SSDEEP
  
  3072:HBI5ArKGCnhgU1XA+ArXjeaMoh6lgUaVwQ+/76bSSN+PS7VyoCeJ6ikd+u26LOUp:HK5ArKjbAxXSaegUqGeGpBohMoK
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2