ebc8ebf04f0decf25c12779e722283fbfca32d79591a400d9adcec7938f4cd01 | Triage

Sharing

General

Target

ebc8ebf04f0decf25c12779e722283fbfca32d79591a400d9adcec7938f4cd01
Size

126KB
Sample

221124-e8w9xscg6z
MD5

effe1f6f7b5b408f588d53a814a1986e
SHA1

5fa31f974ddcd638753dbc9fd616a5b556c127b4
SHA256

ebc8ebf04f0decf25c12779e722283fbfca32d79591a400d9adcec7938f4cd01
SHA512

2702b0723531d72ecd2b52603bdca505cc313f112385c154b2cc22c5f58c108e1b275b8c9cc782631eba28eefc9e699801999ff5565a4e850e15a88b1a8081db
SSDEEP

3072:uQLmZuIPLyr7blrQStd3jUQdW6CTHeOO16ogZrssU4nYaI0yz:T+Ly/prQqz1QTE6dZrqaYfR

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  RG928200002_2014_november_00000329320.023042490280.0324980000038-0000006.exe
- Size
  
  176KB
- MD5
  
  72fa9e74d45dda3085eafb77eb497b1a
- SHA1
  
  536b13842b5c0ff70177c0c4fd80ce1ff892a15e
- SHA256
  
  7a4e899fc05973c8d3fb596750fc1b848daad7cd2cc6cee2c8fb44977e39c45d
- SHA512
  
  f5313d65269010038072e25e2ca6859a914a5db31815ee662def861a7809f6098fd25dc68c142efd5e0929e420221393e73aa77fbcd4ba8af4da95a73329737c
- SSDEEP
  
  3072:zQnHNmI+yMkJR+Omz1C+cSQStd3jUQdW6OTHeOO16ogZrssN6wc+ga0Mhze:zwHBRtJ2BC+Cqz14TE6dZr5PQ
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2