9ebde8fee95c7b1cc5043a5b51d74b3b2f3d5ca2aaa16e1b864fcc7eac4dc059 | Triage

Sharing

General

Target

9ebde8fee95c7b1cc5043a5b51d74b3b2f3d5ca2aaa16e1b864fcc7eac4dc059
Size

307KB
Sample

221124-1ehqbsba73
MD5

e3cc4251a188d7bc00ded28895883604
SHA1

6036d50f20cdc1e0fd23a2889296a57e73741d5f
SHA256

9ebde8fee95c7b1cc5043a5b51d74b3b2f3d5ca2aaa16e1b864fcc7eac4dc059
SHA512

e03de47ab361f79fb3df8367e2f8bedd8eeaf7ee1a1f64d3fbf42e570884e98ab389d4e9230af1fe8ea8b2a2001d98f87bb69fd258c4fee6ee55e47f944b1599
SSDEEP

6144:9BlQ7saOC2fD0q48m6EXuKMvV8NKitvF9HYUbbF2:9BlQfl2fQqrKXtvF9f2

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  9ebde8fee95c7b1cc5043a5b51d74b3b2f3d5ca2aaa16e1b864fcc7eac4dc059
- Size
  
  307KB
- MD5
  
  e3cc4251a188d7bc00ded28895883604
- SHA1
  
  6036d50f20cdc1e0fd23a2889296a57e73741d5f
- SHA256
  
  9ebde8fee95c7b1cc5043a5b51d74b3b2f3d5ca2aaa16e1b864fcc7eac4dc059
- SHA512
  
  e03de47ab361f79fb3df8367e2f8bedd8eeaf7ee1a1f64d3fbf42e570884e98ab389d4e9230af1fe8ea8b2a2001d98f87bb69fd258c4fee6ee55e47f944b1599
- SSDEEP
  
  6144:9BlQ7saOC2fD0q48m6EXuKMvV8NKitvF9HYUbbF2:9BlQfl2fQqrKXtvF9f2
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2