c18ba9108ef37e1eaf9be5723e9fa7505f7360f4a0d69f6985b45839682f9839 | Triage

Sharing

General

Target

c18ba9108ef37e1eaf9be5723e9fa7505f7360f4a0d69f6985b45839682f9839
Size

100KB
Sample

221107-msjb5aeefm
MD5

0eaa804eed686cfa7fd17fabdc2b12c0
SHA1

70f4a8e969b63f939a590f4b24ac561066a22ab6
SHA256

c18ba9108ef37e1eaf9be5723e9fa7505f7360f4a0d69f6985b45839682f9839
SHA512

f9daaeea0e774a25a0c01ab46e7eef3db285778e8e8f912de445ce79b834802dfb3d0557df3c4698d57033ab4ac9fdf1f1c392fa484d10046c0dc9f4035cc27e
SSDEEP

1536:7SG9RdzoS5W0tu7mHY0J6V3wdyLkdrXxrGerQAK7:eaVoS5jTY9AdyLk6AK7

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  c18ba9108ef37e1eaf9be5723e9fa7505f7360f4a0d69f6985b45839682f9839
- Size
  
  100KB
- MD5
  
  0eaa804eed686cfa7fd17fabdc2b12c0
- SHA1
  
  70f4a8e969b63f939a590f4b24ac561066a22ab6
- SHA256
  
  c18ba9108ef37e1eaf9be5723e9fa7505f7360f4a0d69f6985b45839682f9839
- SHA512
  
  f9daaeea0e774a25a0c01ab46e7eef3db285778e8e8f912de445ce79b834802dfb3d0557df3c4698d57033ab4ac9fdf1f1c392fa484d10046c0dc9f4035cc27e
- SSDEEP
  
  1536:7SG9RdzoS5W0tu7mHY0J6V3wdyLkdrXxrGerQAK7:eaVoS5jTY9AdyLk6AK7
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2