1d71e038509bb73f61c8fa6c8f990074ebfa9b35bbb7bd5b93b9b120ee282dcf | Triage

Sharing

General

Target

1d71e038509bb73f61c8fa6c8f990074ebfa9b35bbb7bd5b93b9b120ee282dcf
Size

1.4MB
Sample

221123-gfr6lscf69
MD5

3ae1a29435ebfff9c78478fe911aac77
SHA1

faa1f058cc6496f85ec76de52d371ee6fcaec90c
SHA256

1d71e038509bb73f61c8fa6c8f990074ebfa9b35bbb7bd5b93b9b120ee282dcf
SHA512

e164a94534f82f34f2e6e61db7b883f6b8814a0926718a5416eff9b6c2fd071b8e9e052cb9a450903dbef52d9652138d6768c4dd8f8c8c48be422ba29ead0c9d
SSDEEP

24576:hrK6dClXmekxlm1dl4r260n4dz0as5jc3AZ1COwiUP/5lq8Ar:hrBew72604doSw6ewM

Score

5^/10

Malware Config

Targets

- Target
  
  1d71e038509bb73f61c8fa6c8f990074ebfa9b35bbb7bd5b93b9b120ee282dcf
- Size
  
  1.4MB
- MD5
  
  3ae1a29435ebfff9c78478fe911aac77
- SHA1
  
  faa1f058cc6496f85ec76de52d371ee6fcaec90c
- SHA256
  
  1d71e038509bb73f61c8fa6c8f990074ebfa9b35bbb7bd5b93b9b120ee282dcf
- SHA512
  
  e164a94534f82f34f2e6e61db7b883f6b8814a0926718a5416eff9b6c2fd071b8e9e052cb9a450903dbef52d9652138d6768c4dd8f8c8c48be422ba29ead0c9d
- SSDEEP
  
  24576:hrK6dClXmekxlm1dl4r260n4dz0as5jc3AZ1COwiUP/5lq8Ar:hrBew72604doSw6ewM
Score

5^/10
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2