ed9d44aef86181fb313e9efa86501b23e740c4feb08cc8c86a6367e873c4cd8e | Triage

Sharing

General

Target

ed9d44aef86181fb313e9efa86501b23e740c4feb08cc8c86a6367e873c4cd8e
Size

141KB
Sample

221123-pzs61sff9x
MD5

0d463ddf5b9e12a2f619ff2cc404a030
SHA1

df935411ccfc571a6fd5761b50ff67a098343917
SHA256

ed9d44aef86181fb313e9efa86501b23e740c4feb08cc8c86a6367e873c4cd8e
SHA512

05ab13d918647c25d7d00ebb9a32530f73d2807307d5887baf55127a818962628dab264ab78f88df84135cb1c39af5f62c427ad696dcd2169a5627070f301429
SSDEEP

3072:HAXx836a5ITmeyGCMdH2AYUHQNNsqzYPUy3RM1:HcW3B5ULJd3/PUy3I

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  ed9d44aef86181fb313e9efa86501b23e740c4feb08cc8c86a6367e873c4cd8e
- Size
  
  141KB
- MD5
  
  0d463ddf5b9e12a2f619ff2cc404a030
- SHA1
  
  df935411ccfc571a6fd5761b50ff67a098343917
- SHA256
  
  ed9d44aef86181fb313e9efa86501b23e740c4feb08cc8c86a6367e873c4cd8e
- SHA512
  
  05ab13d918647c25d7d00ebb9a32530f73d2807307d5887baf55127a818962628dab264ab78f88df84135cb1c39af5f62c427ad696dcd2169a5627070f301429
- SSDEEP
  
  3072:HAXx836a5ITmeyGCMdH2AYUHQNNsqzYPUy3RM1:HcW3B5ULJd3/PUy3I
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2