934a51b8d617eb45e223e80970cb2a9be8d964c4a7ce499cc84f14c740d95bac | Triage

Sharing

General

Target

934a51b8d617eb45e223e80970cb2a9be8d964c4a7ce499cc84f14c740d95bac
Size

208KB
Sample

221124-fwb9nabc67
MD5

0121e74fb95e38c4662923ce38f6a73c
SHA1

96d28ff5a21d27e44530af68ba4740e65c7e8b37
SHA256

934a51b8d617eb45e223e80970cb2a9be8d964c4a7ce499cc84f14c740d95bac
SHA512

72c050641e2f880c93c8c44290174e709e8a4e25d3f6b22f0687af82472e047e7f48b090f297a1074a9e4a77a5a278eb3f49b0dd42c18af81933f73e9731a462
SSDEEP

6144:b1HHL8uRokJtdCIo+K27GeGb2+gQN05Ic65V:pAuRoklnHK27Gvb2+N05IN

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.exe
- Size
  
  278KB
- MD5
  
  b650be9b84ff38f06f217ad982b8660d
- SHA1
  
  20c4b3e5dbe971309c3ec966e4e671d8c56580c5
- SHA256
  
  586ee2c334dff3ada56930d7de90999634893495ba8acd524273b955303b23fd
- SHA512
  
  d132fa2fc0cbbd1f03e9c83c06aef54ea5700ba648f6fa7a04b3bc235a65758d0168e72428820115e546cd6a785281253adf340444db22f79b4cffea45f31371
- SSDEEP
  
  6144:9iaYUpwXV9RIKWn/TUVs8oL48N8lqFzc+tRJSht4K:DzXrN8UbtPShiK
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2