2789f1ec155c60b10980f9e2ed07bf21b68ae1ee46e782111f306d8289113233 | Triage

Sharing

General

Target

2789f1ec155c60b10980f9e2ed07bf21b68ae1ee46e782111f306d8289113233
Size

51KB
Sample

221107-s784zseec3
MD5

0557408783805734cf336e6ad486217d
SHA1

454cce7d93fb7908a839a4ba73ba5edf63c9b7c0
SHA256

2789f1ec155c60b10980f9e2ed07bf21b68ae1ee46e782111f306d8289113233
SHA512

a6d962b8ee9bea03d95aa717cfb976e7873f54443ed192c1166b91726547cb2e11a0091088a831c937d077e34ea9666b81ca8552ebffdcf4a947946c58a16b35
SSDEEP

1536:d/ARS+XLldrEafUeYNq4gUw8Vn9vMU/VAMX8:FAR33IOUJNq4RpZMUbX8

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  2789f1ec155c60b10980f9e2ed07bf21b68ae1ee46e782111f306d8289113233
- Size
  
  51KB
- MD5
  
  0557408783805734cf336e6ad486217d
- SHA1
  
  454cce7d93fb7908a839a4ba73ba5edf63c9b7c0
- SHA256
  
  2789f1ec155c60b10980f9e2ed07bf21b68ae1ee46e782111f306d8289113233
- SHA512
  
  a6d962b8ee9bea03d95aa717cfb976e7873f54443ed192c1166b91726547cb2e11a0091088a831c937d077e34ea9666b81ca8552ebffdcf4a947946c58a16b35
- SSDEEP
  
  1536:d/ARS+XLldrEafUeYNq4gUw8Vn9vMU/VAMX8:FAR33IOUJNq4RpZMUbX8
Score

8^/10

persistence
- Sets DLL path for service in the registry
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2