4b5175d655facb985f50d59edc5d03329673d0213d74879617dee15bd17799e1 | Triage

Sharing

General

Target

4b5175d655facb985f50d59edc5d03329673d0213d74879617dee15bd17799e1
Size

1.4MB
Sample

221107-g9h5ssccg4
MD5

01ebf091d0e254bc650c5f30183e4b20
SHA1

71835397ba5f5b93b95b625f8923612cc3235a1f
SHA256

4b5175d655facb985f50d59edc5d03329673d0213d74879617dee15bd17799e1
SHA512

7d0449d469ad8b6c062c5f3d3fd78b4ca5e12a471153767a169e3ab93b06bd3b535591094384abf9c2b3a1ded91d22420377549f319abae21cd48116b2b49251
SSDEEP

24576:tNmF/mnBoDM5f7F2JQRKZk+61i5cCPWZj+VhL8OamPRKplJfVXT24WTEvzHJDsn:tYVZo5TcJQqk+61i5cYWZjSTDPYtfVjI

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  4b5175d655facb985f50d59edc5d03329673d0213d74879617dee15bd17799e1
- Size
  
  1.4MB
- MD5
  
  01ebf091d0e254bc650c5f30183e4b20
- SHA1
  
  71835397ba5f5b93b95b625f8923612cc3235a1f
- SHA256
  
  4b5175d655facb985f50d59edc5d03329673d0213d74879617dee15bd17799e1
- SHA512
  
  7d0449d469ad8b6c062c5f3d3fd78b4ca5e12a471153767a169e3ab93b06bd3b535591094384abf9c2b3a1ded91d22420377549f319abae21cd48116b2b49251
- SSDEEP
  
  24576:tNmF/mnBoDM5f7F2JQRKZk+61i5cCPWZj+VhL8OamPRKplJfVXT24WTEvzHJDsn:tYVZo5TcJQqk+61i5cYWZjSTDPYtfVjI
Score

8^/10

discovery exploit
- Executes dropped EXE
- Possible privilege escalation attempt
  exploit
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploit

behavioral2

discoveryexploit