82da6f1566cb9035f53f90ac62ced939ebe959c86dd42863807bb3a39b26dc02 | Triage

Sharing

General

Target

82da6f1566cb9035f53f90ac62ced939ebe959c86dd42863807bb3a39b26dc02
Size

124KB
Sample

221124-emlw3aga42
MD5

b7d694082c68b8f0c8dda06d1c3be02a
SHA1

146f3a062a5107c8f01f8c574bc6480c063935e4
SHA256

82da6f1566cb9035f53f90ac62ced939ebe959c86dd42863807bb3a39b26dc02
SHA512

6f69503a646ddeeaff0a824e60b629288f50a0497d20bf89dff27e8f135e00bd634f23669514ef81808b82aa5680d36e6d5c7b38cfd9778d03a844cf0ebe3a4b
SSDEEP

3072:nbYbQznpGLnCo0dXXxTsuGb+j3FHegipM0:nbAQBdHxwuGWsgQ

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  Informationen_Kontobewegung_dezember_2014_de_20_8139_237_90109238_000129_000028_05.exe
- Size
  
  156KB
- MD5
  
  6fed865f5e569f40c884f0dc9ba21f6f
- SHA1
  
  603bf67bad75e611f80d311232edcb9f65706068
- SHA256
  
  3f33ae4ea87e4c2f3b2c60152da482a116e9c453662ac438b50458e56edcd87c
- SHA512
  
  b6a61eb80fac8d10435fa2280970c58a800fc86751e14bd3d5f1a1c62c7bc5a6b0b5b741770e0c6cfac78de20174d7c1cef6366c7bd0d07cabfad9d173a6cf31
- SSDEEP
  
  3072:X2V3Q7emkdat92PH48GLnCo0dXjxTsuGb+j3FRvtVFVlD2Pq:mV3Q6m6at98LdzxwuGWJ7V1D
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2