fc9b11a8ff65c41f3748a3e17ddb4c0213d2e09e68b99f4555c5ad1451ae7298 | Triage

Sharing

General

Target

fc9b11a8ff65c41f3748a3e17ddb4c0213d2e09e68b99f4555c5ad1451ae7298
Size

206KB
Sample

221123-sq6brsfa9x
MD5

a78dc39ec4475e37a5d3102a1e122a79
SHA1

912133c0fb8696d1073e99838d6da6c59df44ade
SHA256

fc9b11a8ff65c41f3748a3e17ddb4c0213d2e09e68b99f4555c5ad1451ae7298
SHA512

a06a92293f3cd442081a01d4f71be4c79319f19ceda80f957e41368e3a2b83f7ee5e1e669bd1315243134d03a5f656809d2fdf518c8dc12b0e1803b18c982bf7
SSDEEP

3072:9sFdtnxVNApHf6tocw5chvs2Ot0klk1JxuEydR0UO7WkZq/hmyGPtZ:enc6ocw5us2Onlk1KROq/gyGz

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  fc9b11a8ff65c41f3748a3e17ddb4c0213d2e09e68b99f4555c5ad1451ae7298
- Size
  
  206KB
- MD5
  
  a78dc39ec4475e37a5d3102a1e122a79
- SHA1
  
  912133c0fb8696d1073e99838d6da6c59df44ade
- SHA256
  
  fc9b11a8ff65c41f3748a3e17ddb4c0213d2e09e68b99f4555c5ad1451ae7298
- SHA512
  
  a06a92293f3cd442081a01d4f71be4c79319f19ceda80f957e41368e3a2b83f7ee5e1e669bd1315243134d03a5f656809d2fdf518c8dc12b0e1803b18c982bf7
- SSDEEP
  
  3072:9sFdtnxVNApHf6tocw5chvs2Ot0klk1JxuEydR0UO7WkZq/hmyGPtZ:enc6ocw5us2Onlk1KROq/gyGz
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2