3235b022e48ef635c8ee7d6c753f9adca385a9afaa56bde5957c96e15e422450 | Triage

Sharing

General

Target

3235b022e48ef635c8ee7d6c753f9adca385a9afaa56bde5957c96e15e422450
Size

392KB
Sample

221123-rz7erahh79
MD5

e05eb29d1eecf974d032c886689e03b3
SHA1

ae914d60f8671374025a764328c3f2069c068257
SHA256

3235b022e48ef635c8ee7d6c753f9adca385a9afaa56bde5957c96e15e422450
SHA512

7f5b603e3041629b6a4a4c9c2b3728715c8344c9312003ec2650cab3e94ad9f0c7a0956aad044776e30102f0a48303df85d459aa2b66695ee3b0b1412fe43d45
SSDEEP

6144:AnGX7Qbd1P6YpQ3LbrSZ/1vL99Vay06N9JUo923TNclWk05S24+:AkcGkQ3EVayl9aobT23

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  3235b022e48ef635c8ee7d6c753f9adca385a9afaa56bde5957c96e15e422450
- Size
  
  392KB
- MD5
  
  e05eb29d1eecf974d032c886689e03b3
- SHA1
  
  ae914d60f8671374025a764328c3f2069c068257
- SHA256
  
  3235b022e48ef635c8ee7d6c753f9adca385a9afaa56bde5957c96e15e422450
- SHA512
  
  7f5b603e3041629b6a4a4c9c2b3728715c8344c9312003ec2650cab3e94ad9f0c7a0956aad044776e30102f0a48303df85d459aa2b66695ee3b0b1412fe43d45
- SSDEEP
  
  6144:AnGX7Qbd1P6YpQ3LbrSZ/1vL99Vay06N9JUo923TNclWk05S24+:AkcGkQ3EVayl9aobT23
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2