bd171da2bb502fdfa7169b52ee3a1127f4d8540f045dfa32c72e34fadf5fc111 | Triage

Sharing

General

Target

bd171da2bb502fdfa7169b52ee3a1127f4d8540f045dfa32c72e34fadf5fc111
Size

125KB
Sample

221124-eqbv9sbd5z
MD5

1b9a2e8abd792bd74623826185dfedba
SHA1

1ca16bb26299e8015343d7cfe9e3a47bdce48393
SHA256

bd171da2bb502fdfa7169b52ee3a1127f4d8540f045dfa32c72e34fadf5fc111
SHA512

3a66d1d246a58aa9ef0f34eeff060f61844a8e2a490907fdc21afc66990b3aa8247281c1b1d33a84bdb0225d37198cf79a486031808af015e219d679aff56b6f
SSDEEP

3072:Hm5qKt1v6w7iIN/mdUMNyypfu6M5HPMW+dpgn8T+oL0jh:G5/gw7iwOmMNpA6M21C

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  ihre_rechnung_11_2014_02_45_001_033_756_938923002_2210500407_3_0_5_22_29_9002_002001028.exe
- Size
  
  164KB
- MD5
  
  e28d0c6fd513c1e54b9d94b8f88ccbf4
- SHA1
  
  c2a716460f2a187f068e7b832d128179a6f471a8
- SHA256
  
  a82767b36e38a43131ae34bd0e6b650398f8769b14c7e46343675287c7c2b422
- SHA512
  
  8dbbebed2c3bfe915a798d70815e0f4cd0a9b9035c98f8dc9e60d05f6efb9f1852ec2b7db47e503396c3206207c7289c1fb20a94a4dbfe267e9886e78ada60be
- SSDEEP
  
  3072:xJ/YG2oBFuE6q+I9jN/mdUMNqypfu6M5HPMW+dpkGj8qOD9Jf+yY:xJ/GoDVZOmMNRA6M2wqOD
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2