638f06c5614b64c03132a653db520a6d1cf487c95a34077811909ee0e6d1c793 | Triage

Sharing

General

Target

638f06c5614b64c03132a653db520a6d1cf487c95a34077811909ee0e6d1c793
Size

161KB
Sample

221123-lqny6aca45
MD5

6d721c5980e1fc26ef92b3f0746681c5
SHA1

b808b0910b4d113c96f0e5c573f8ab68453be1f8
SHA256

638f06c5614b64c03132a653db520a6d1cf487c95a34077811909ee0e6d1c793
SHA512

ad29d7ff249483467e31cf5c829b676abcb9d4781f8c55534f27ca13d77411bee58952b7ba8a7f5a2e99339274165da10798530ad367e99588b98ac1be24982f
SSDEEP

3072:O1UqeDPEybBYTN6jZ4fReG6NkHqQTtwRc6GCCT/oQXbTlOf/mdQgUfq:OuqeDPE4BYGkV6NkHq4wpGsYbTi/8QgD

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  638f06c5614b64c03132a653db520a6d1cf487c95a34077811909ee0e6d1c793
- Size
  
  161KB
- MD5
  
  6d721c5980e1fc26ef92b3f0746681c5
- SHA1
  
  b808b0910b4d113c96f0e5c573f8ab68453be1f8
- SHA256
  
  638f06c5614b64c03132a653db520a6d1cf487c95a34077811909ee0e6d1c793
- SHA512
  
  ad29d7ff249483467e31cf5c829b676abcb9d4781f8c55534f27ca13d77411bee58952b7ba8a7f5a2e99339274165da10798530ad367e99588b98ac1be24982f
- SSDEEP
  
  3072:O1UqeDPEybBYTN6jZ4fReG6NkHqQTtwRc6GCCT/oQXbTlOf/mdQgUfq:OuqeDPE4BYGkV6NkHq4wpGsYbTi/8QgD
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2