61ce6ec62ae5b2e21ef498d8db98e9df5d24eee15cf215f7fe702ff1653ad836 | Triage

Sharing

General

Target

61ce6ec62ae5b2e21ef498d8db98e9df5d24eee15cf215f7fe702ff1653ad836
Size

294KB
Sample

221123-rgmmmage97
MD5

1e11ba672d94a4510ce55c6378c8cdb6
SHA1

c33e6e05b0e7713d33bd9a17e8b41c10e019fce4
SHA256

61ce6ec62ae5b2e21ef498d8db98e9df5d24eee15cf215f7fe702ff1653ad836
SHA512

9d34f23959f27843d513044dc6d8d1f53ab04d1f8fe53ed7ce1ea27f703f688495449677eac093351a9c0c698cdf06c4cfcaa57deb838189df2ba45c6ecda077
SSDEEP

6144:cXA71FMhGYcdu1DtD4xhKBO1iT4ICH3Ng61:22FMhGY62DtDzO1iTFW3e61

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  61ce6ec62ae5b2e21ef498d8db98e9df5d24eee15cf215f7fe702ff1653ad836
- Size
  
  294KB
- MD5
  
  1e11ba672d94a4510ce55c6378c8cdb6
- SHA1
  
  c33e6e05b0e7713d33bd9a17e8b41c10e019fce4
- SHA256
  
  61ce6ec62ae5b2e21ef498d8db98e9df5d24eee15cf215f7fe702ff1653ad836
- SHA512
  
  9d34f23959f27843d513044dc6d8d1f53ab04d1f8fe53ed7ce1ea27f703f688495449677eac093351a9c0c698cdf06c4cfcaa57deb838189df2ba45c6ecda077
- SSDEEP
  
  6144:cXA71FMhGYcdu1DtD4xhKBO1iT4ICH3Ng61:22FMhGY62DtDzO1iTFW3e61
Score

7^/10

persistence
- Drops startup file
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2