efca293ab17444e18b7e16e925ca2f54142f0ea4ac6edabc2f0e85ac3c7dc320 | Triage

Sharing

General

Target

efca293ab17444e18b7e16e925ca2f54142f0ea4ac6edabc2f0e85ac3c7dc320
Size

191KB
Sample

221123-1pqhxsah7y
MD5

471c196b84257ef4618a16573ec8de90
SHA1

7675db3e4f2a4be2a690eba8dee0b34d456d150a
SHA256

efca293ab17444e18b7e16e925ca2f54142f0ea4ac6edabc2f0e85ac3c7dc320
SHA512

c003a9c24be6e66d7b06d20290a68b1962b08c2d448b6b49b23a3cdcd56e75aede2a31238df8a068c3e64ec1dd76cf24afcdf51ac792c855016630f87ab4f0cc
SSDEEP

3072:Q1uis3Hb+Q5Xq8+5zQWFDsJrmVyzACeJwi72jlQpBW/RsFPPtuui/g20NdyPOzIz:y0bR1+5kWFQBYAcJDpo6FPPt6g2BZ2m

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  efca293ab17444e18b7e16e925ca2f54142f0ea4ac6edabc2f0e85ac3c7dc320
- Size
  
  191KB
- MD5
  
  471c196b84257ef4618a16573ec8de90
- SHA1
  
  7675db3e4f2a4be2a690eba8dee0b34d456d150a
- SHA256
  
  efca293ab17444e18b7e16e925ca2f54142f0ea4ac6edabc2f0e85ac3c7dc320
- SHA512
  
  c003a9c24be6e66d7b06d20290a68b1962b08c2d448b6b49b23a3cdcd56e75aede2a31238df8a068c3e64ec1dd76cf24afcdf51ac792c855016630f87ab4f0cc
- SSDEEP
  
  3072:Q1uis3Hb+Q5Xq8+5zQWFDsJrmVyzACeJwi72jlQpBW/RsFPPtuui/g20NdyPOzIz:y0bR1+5kWFQBYAcJDpo6FPPt6g2BZ2m
Score

8^/10

persistence
- Executes dropped EXE
- Modifies AppInit DLL entries
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2