94a4f9fcfbfce04a4851b8077c51380f693ffc8daa328d96e64a0d630e1e0cf3 | Triage

Sharing

General

Target

94a4f9fcfbfce04a4851b8077c51380f693ffc8daa328d96e64a0d630e1e0cf3
Size

170KB
Sample

221124-1y672acb92
MD5

4ab95a184896edf04ec14b32b701bd4d
SHA1

1d50e88dea2b5b4b4508827a9224b8ef0f718dc7
SHA256

94a4f9fcfbfce04a4851b8077c51380f693ffc8daa328d96e64a0d630e1e0cf3
SHA512

ed89a2eb326ac339b098f27c06a82434ffb9f7cb2c998f17f625dfd1bcd939d17cdc46bf0e6bd4183f86b84b3bd57e5fd357da08fdb82b22710c93fb4ad505ed
SSDEEP

3072:22FiJ+yTKhW6wVkhcVUKdTctzath6K0gyw3MSsx/GsyllR2AGABPlb9CJu+:ri8SKgPCcCScuh69AMSK/Glv2vqOJu

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  94a4f9fcfbfce04a4851b8077c51380f693ffc8daa328d96e64a0d630e1e0cf3
- Size
  
  170KB
- MD5
  
  4ab95a184896edf04ec14b32b701bd4d
- SHA1
  
  1d50e88dea2b5b4b4508827a9224b8ef0f718dc7
- SHA256
  
  94a4f9fcfbfce04a4851b8077c51380f693ffc8daa328d96e64a0d630e1e0cf3
- SHA512
  
  ed89a2eb326ac339b098f27c06a82434ffb9f7cb2c998f17f625dfd1bcd939d17cdc46bf0e6bd4183f86b84b3bd57e5fd357da08fdb82b22710c93fb4ad505ed
- SSDEEP
  
  3072:22FiJ+yTKhW6wVkhcVUKdTctzath6K0gyw3MSsx/GsyllR2AGABPlb9CJu+:ri8SKgPCcCScuh69AMSK/Glv2vqOJu
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2