919de11e3ba65b19b6b2c36501182369c16e5073505e25db5d07da1d20475baf | Triage

Sharing

General

Target

919de11e3ba65b19b6b2c36501182369c16e5073505e25db5d07da1d20475baf
Size

114KB
Sample

221123-qyc9vafb56
MD5

32076c70f4bed33da3e9f54a9feb0ef1
SHA1

b550c459d0e9d41307b11fd2af05f789645de412
SHA256

919de11e3ba65b19b6b2c36501182369c16e5073505e25db5d07da1d20475baf
SHA512

5147ca816f8db22a637d99da6af418245792c6e5b3f538d166cb4c5c18da9b723cccb81a786c70b934d7d70ca841dbd839ea850567bbdafbd549b1506b1b3fdd
SSDEEP

3072:zx/vggcs61z2fTkA8TM/BlV2td4WetIfHDv:V/vgg5618TQTgBlUtHTf

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  919de11e3ba65b19b6b2c36501182369c16e5073505e25db5d07da1d20475baf
- Size
  
  114KB
- MD5
  
  32076c70f4bed33da3e9f54a9feb0ef1
- SHA1
  
  b550c459d0e9d41307b11fd2af05f789645de412
- SHA256
  
  919de11e3ba65b19b6b2c36501182369c16e5073505e25db5d07da1d20475baf
- SHA512
  
  5147ca816f8db22a637d99da6af418245792c6e5b3f538d166cb4c5c18da9b723cccb81a786c70b934d7d70ca841dbd839ea850567bbdafbd549b1506b1b3fdd
- SSDEEP
  
  3072:zx/vggcs61z2fTkA8TM/BlV2td4WetIfHDv:V/vgg5618TQTgBlUtHTf
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2