49d24056a61b688a35c1c486f2f11787446a71f425e935084f2cca79245c1838 | Triage

Sharing

General

Target

49d24056a61b688a35c1c486f2f11787446a71f425e935084f2cca79245c1838
Size

137KB
Sample

221123-lka54sbe93
MD5

8a766b081dc4e3a60d8aa9fef5b25b65
SHA1

8e47fcbf4d4e1452959c88ab3ff385ba1c349a1b
SHA256

49d24056a61b688a35c1c486f2f11787446a71f425e935084f2cca79245c1838
SHA512

511c91cdbf931c063daa97da1b0d8b9f802f008dd390503720a40ff8579eafbfb3de4710f174acd7bb6627f49f55026a254345c5a269124563fb0026ab2428be
SSDEEP

192:EmdL+vn03wunMNfNbP3vx9vu8vwyydvNFMj4X0z9bqwlw5v0wQFmixqY+vwv0yra:vmRmuqzkkeo

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  49d24056a61b688a35c1c486f2f11787446a71f425e935084f2cca79245c1838
- Size
  
  137KB
- MD5
  
  8a766b081dc4e3a60d8aa9fef5b25b65
- SHA1
  
  8e47fcbf4d4e1452959c88ab3ff385ba1c349a1b
- SHA256
  
  49d24056a61b688a35c1c486f2f11787446a71f425e935084f2cca79245c1838
- SHA512
  
  511c91cdbf931c063daa97da1b0d8b9f802f008dd390503720a40ff8579eafbfb3de4710f174acd7bb6627f49f55026a254345c5a269124563fb0026ab2428be
- SSDEEP
  
  192:EmdL+vn03wunMNfNbP3vx9vu8vwyydvNFMj4X0z9bqwlw5v0wQFmixqY+vwv0yra:vmRmuqzkkeo
Score

8^/10

persistence
- Blocklisted process makes network request
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2