1c9c11f413068923b5c24b36d2e3efa253deef989a7f3fd5c25b12d92fcff536 | Triage

Sharing

General

Target

1c9c11f413068923b5c24b36d2e3efa253deef989a7f3fd5c25b12d92fcff536
Size

310KB
Sample

221123-r7z1msdf3s
MD5

2ede316bd717b9d7ca25707a4fa40b5f
SHA1

0db30d9ca51d6874b07dcca4ba7101fe843d9aab
SHA256

1c9c11f413068923b5c24b36d2e3efa253deef989a7f3fd5c25b12d92fcff536
SHA512

006869a386df1c86bc2729a98f81e3ff8d3b5a7aceb85a97f803707a7f4d16912bacc5bdb2e9e54f3820b3872623da4163ebda5b68cb8e8a41e15d606bd115f9
SSDEEP

3072:FSl6EaT2Tip/qJ3sP/gsVlpgyaMGdwj4y2/scaALUX9+gkcJYd1WYykLBA11fSDZ:FGGVHgyw0cah9RxYTWSV6w20z3cvHA

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  1c9c11f413068923b5c24b36d2e3efa253deef989a7f3fd5c25b12d92fcff536
- Size
  
  310KB
- MD5
  
  2ede316bd717b9d7ca25707a4fa40b5f
- SHA1
  
  0db30d9ca51d6874b07dcca4ba7101fe843d9aab
- SHA256
  
  1c9c11f413068923b5c24b36d2e3efa253deef989a7f3fd5c25b12d92fcff536
- SHA512
  
  006869a386df1c86bc2729a98f81e3ff8d3b5a7aceb85a97f803707a7f4d16912bacc5bdb2e9e54f3820b3872623da4163ebda5b68cb8e8a41e15d606bd115f9
- SSDEEP
  
  3072:FSl6EaT2Tip/qJ3sP/gsVlpgyaMGdwj4y2/scaALUX9+gkcJYd1WYykLBA11fSDZ:FGGVHgyw0cah9RxYTWSV6w20z3cvHA
Score

8^/10

persistence
- Sets file execution options in registry
  persistence
- Checks for any installed AV software in registry
- Drops desktop.ini file(s)
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Security Software Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2