f1ddd37ce04a99e120f047a583892dea3400d51d8a8d05787f492704c3bd7629 | Triage

Sharing

General

Target

f1ddd37ce04a99e120f047a583892dea3400d51d8a8d05787f492704c3bd7629
Size

308KB
Sample

221123-xfhvyaeh35
MD5

a5de359d81be742b57ce9e639a8ae9d6
SHA1

398a5c3e787a0efa3ccc45ba1326797cb55ef83e
SHA256

f1ddd37ce04a99e120f047a583892dea3400d51d8a8d05787f492704c3bd7629
SHA512

c2a58ad1354eed760d83d41ee70c928a6fbb7f8646d0a841e94e4fef43f1000a2fe56715af16133b9a373ab4ddc42bb33156175e7027337a93d36287206a54e4
SSDEEP

6144:wBR/4b5yUHU243/c28CYr086A3eGzD3kz:eSFuSN6weG0

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  f1ddd37ce04a99e120f047a583892dea3400d51d8a8d05787f492704c3bd7629
- Size
  
  308KB
- MD5
  
  a5de359d81be742b57ce9e639a8ae9d6
- SHA1
  
  398a5c3e787a0efa3ccc45ba1326797cb55ef83e
- SHA256
  
  f1ddd37ce04a99e120f047a583892dea3400d51d8a8d05787f492704c3bd7629
- SHA512
  
  c2a58ad1354eed760d83d41ee70c928a6fbb7f8646d0a841e94e4fef43f1000a2fe56715af16133b9a373ab4ddc42bb33156175e7027337a93d36287206a54e4
- SSDEEP
  
  6144:wBR/4b5yUHU243/c28CYr086A3eGzD3kz:eSFuSN6weG0
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2