600998a2f877eefb1960d2ed167a955b0e07f406527a41ca649d024dee10254e | Triage

Sharing

General

Target

600998a2f877eefb1960d2ed167a955b0e07f406527a41ca649d024dee10254e
Size

120KB
Sample

221124-eldt3aba8y
MD5

c812d1af9369b77522c7e095b900cc8a
SHA1

6b90de1712063e30250bb8e4d844b6453d1af548
SHA256

600998a2f877eefb1960d2ed167a955b0e07f406527a41ca649d024dee10254e
SHA512

83113cbc3787d1a7476b881c1033237839e2ecaeb9bd0d27667cdff2509685d278a277292ff409e6be90e1730e99f3e1eefee0915f51f27c2f397cdddf5fc7a0
SSDEEP

3072:1cJI0yFktepDlXFQuYlgSLLPr6s6THp6YF/xUhlz8k2ck5n:1oisaQuYumqJ6Hhx8tcY

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  Informationen_Kontobewegung_dezember_2014_de_20_8139_237_90109238_000129_000028_05.exe
- Size
  
  148KB
- MD5
  
  bb6eaa3caf122030e276ddb20790e5e5
- SHA1
  
  050019c2864790aa5f0ac4fa6d2e1a65eb59cd70
- SHA256
  
  bba5332c6f0d44bc3f2935842dfbcc051f3edb1b7f186a94c665271ccca13755
- SHA512
  
  1290ae818f8a64288848fd6fc1e721edb96b4cd5b0991b1f7d10602198ddefdfcdd1f8b3b7610594432581752f14cc60514cd57930c636a4b8a714a18f7d4d7d
- SSDEEP
  
  3072:cIjIB3k5uMfRUL9glXFQuMlgSLLPr6s6THgFWP27:n/uUa+QuMumqAFWP6
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2