49beb0a6d4939f2ff6235a8e9055a841289f2231459c345a9ca6460467dbb50c | Triage

Sharing

General

Target

49beb0a6d4939f2ff6235a8e9055a841289f2231459c345a9ca6460467dbb50c
Size

484KB
Sample

221123-rq24nshc66
MD5

b8c2e13eb6cf8afa915d21418a12b936
SHA1

87bade9cf91e8e1367cb2965a68a61e9189977fe
SHA256

49beb0a6d4939f2ff6235a8e9055a841289f2231459c345a9ca6460467dbb50c
SHA512

ba7b33cad5b85613819f41caafefdff13642d6f8b9a0baa0495145ff9b7eeae0bb35bb2f10aa299b3d6d4c688f410351f4a4ebd4eb85e9f86e7c313b353ab33c
SSDEEP

6144:FW9XhWHy50alZnzKl7KX97bDMG0dBAb+wuVGy+zEvG:whNnzKleN7bDMG0dBausyY

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  49beb0a6d4939f2ff6235a8e9055a841289f2231459c345a9ca6460467dbb50c
- Size
  
  484KB
- MD5
  
  b8c2e13eb6cf8afa915d21418a12b936
- SHA1
  
  87bade9cf91e8e1367cb2965a68a61e9189977fe
- SHA256
  
  49beb0a6d4939f2ff6235a8e9055a841289f2231459c345a9ca6460467dbb50c
- SHA512
  
  ba7b33cad5b85613819f41caafefdff13642d6f8b9a0baa0495145ff9b7eeae0bb35bb2f10aa299b3d6d4c688f410351f4a4ebd4eb85e9f86e7c313b353ab33c
- SSDEEP
  
  6144:FW9XhWHy50alZnzKl7KX97bDMG0dBAb+wuVGy+zEvG:whNnzKleN7bDMG0dBausyY
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2