1902e7bb5894070beef5650490ec2e3d727a4d817ab099494cd2a7aa8b1644e1 | Triage

Sharing

General

Target

1902e7bb5894070beef5650490ec2e3d727a4d817ab099494cd2a7aa8b1644e1
Size

1.3MB
Sample

221123-r19aqsda7z
MD5

caf36f86dcf25bd77c29c94854ca8fbf
SHA1

0ddc067c2d5b1707df2e137ea1cdf7ff78f2546a
SHA256

1902e7bb5894070beef5650490ec2e3d727a4d817ab099494cd2a7aa8b1644e1
SHA512

bb872d79669a9a00574ef2158be0fe91af880ccd155e8c9bdae16856937c77d00c49a7b1004ee02471e1cf91dd193ff3f513ef80615ea7bf4a856073fefe5cc4
SSDEEP

24576:brKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakm:brKo4ZwCOnYjVmJPap

Score

5^/10

Malware Config

Targets

- Target
  
  1902e7bb5894070beef5650490ec2e3d727a4d817ab099494cd2a7aa8b1644e1
- Size
  
  1.3MB
- MD5
  
  caf36f86dcf25bd77c29c94854ca8fbf
- SHA1
  
  0ddc067c2d5b1707df2e137ea1cdf7ff78f2546a
- SHA256
  
  1902e7bb5894070beef5650490ec2e3d727a4d817ab099494cd2a7aa8b1644e1
- SHA512
  
  bb872d79669a9a00574ef2158be0fe91af880ccd155e8c9bdae16856937c77d00c49a7b1004ee02471e1cf91dd193ff3f513ef80615ea7bf4a856073fefe5cc4
- SSDEEP
  
  24576:brKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakm:brKo4ZwCOnYjVmJPap
Score

5^/10
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2