be4806234855615f9c50e68bf067ce5dda3ae2138b761dc3a9cc5cf51f520562 | Triage

Sharing

General

Target

be4806234855615f9c50e68bf067ce5dda3ae2138b761dc3a9cc5cf51f520562
Size

126KB
Sample

221124-eyfjesca4z
MD5

792c3692b06a8133b4602cd6d57fef6a
SHA1

6de7099e090985ce7a1c108ff80c6da7d8c1ef65
SHA256

be4806234855615f9c50e68bf067ce5dda3ae2138b761dc3a9cc5cf51f520562
SHA512

01c4109748c59a7b2b14909223e76b5aa3fac52ddf711aa58ce380608682df2571fdbf7543d1aa308c405a8a926a12842f58d055ced380335cb9047a1fb3526b
SSDEEP

3072:A3FJ821ZZR7TwOCMiECI115hswWey5ZU6GEAE+YBqid4F:AVJ8GZR7TwOCMiECI3pT2jhC/f

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  online_transaktions_11_2014_0939380001_12987384_93_39_003_365_9388347_00111_02000028.exe
- Size
  
  168KB
- MD5
  
  bbf602cc98f05af58228dfc975622b04
- SHA1
  
  70fb72c5217aed3c52349a3a92fda087297203b5
- SHA256
  
  64dbe523c9ff1558fedaba3d2fc6476893cb2286703e69bcb30eb3015f5bd82a
- SHA512
  
  bc1e3819532e0cbcc7377c5e64cb100ef211a9e6b502f0d36a14ec0b80d2378e28d3263d64071448901a8096e904a7e845124a5d7ecc2c670459f1d6e783cfcd
- SSDEEP
  
  3072:lfmAD4c6xEGUAV31hECI115hswWe25ZU6GEAE+YBTVdX7lqEd+zr3/1C:lfYc6EGUYhECI3pTqjhC0fUlM
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2