731e265ebf7c426e315ee7f6af3907834133768fadea3b6519cf53444d9cb462 | Triage

Sharing

General

Target

731e265ebf7c426e315ee7f6af3907834133768fadea3b6519cf53444d9cb462
Size

268KB
Sample

221124-3t17bsgc43
MD5

1d54510f8d1dadccd46ea4808807cfe1
SHA1

d3bac71c7ab545a473689e2bd636659dbd46250e
SHA256

731e265ebf7c426e315ee7f6af3907834133768fadea3b6519cf53444d9cb462
SHA512

65d111cd36be60a0e4fe5ac35bdf06ab99a0d28133c11da59aee97cbb093dbd56cdae5071b609d996c7708a2e40b119830e3944982937a57e2e9fbea5cffdb7f
SSDEEP

6144:VvxByyUIr90KjbKEY1wQhyDaPGiB9wgHbUmzT95PTf:RxByyUYKt1w14dHbUKTHTf

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  731e265ebf7c426e315ee7f6af3907834133768fadea3b6519cf53444d9cb462
- Size
  
  268KB
- MD5
  
  1d54510f8d1dadccd46ea4808807cfe1
- SHA1
  
  d3bac71c7ab545a473689e2bd636659dbd46250e
- SHA256
  
  731e265ebf7c426e315ee7f6af3907834133768fadea3b6519cf53444d9cb462
- SHA512
  
  65d111cd36be60a0e4fe5ac35bdf06ab99a0d28133c11da59aee97cbb093dbd56cdae5071b609d996c7708a2e40b119830e3944982937a57e2e9fbea5cffdb7f
- SSDEEP
  
  6144:VvxByyUIr90KjbKEY1wQhyDaPGiB9wgHbUmzT95PTf:RxByyUYKt1w14dHbUKTHTf
Score

8^/10

persistence
- Sets file execution options in registry
  persistence
- Checks for any installed AV software in registry
- Drops desktop.ini file(s)
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Security Software Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2