d7ac40a1085ad4eae18149e6f08f128ef86936e21cba1d7ec27703c38f99cabd | Triage

Sharing

General

Target

d7ac40a1085ad4eae18149e6f08f128ef86936e21cba1d7ec27703c38f99cabd
Size

208KB
Sample

221124-j7n95sdh51
MD5

00380257218c045185a8cbc06abd522c
SHA1

2a1a03aaa07634163e82010dce38fa531c9cb552
SHA256

d7ac40a1085ad4eae18149e6f08f128ef86936e21cba1d7ec27703c38f99cabd
SHA512

a7c56f959245a7139ba35cf7f13859a87a0ece4541a536491b12cb2e1f8572272425758891aea0ffe5bae4b7d8aa2ffaa48bcc03b28c4c0e7fab35229b2a2126
SSDEEP

6144:pOTWvWSZhW3BG/KkGllitIcFbb0kwA9hbVCjE:p6Ch+BIGlYCcFAtA9hUI

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  2014_11informationen_finanzgruppe_000070002.000038622.771714407-0044.exe
- Size
  
  278KB
- MD5
  
  2804797e817cd57397c22538ab71a9b5
- SHA1
  
  88b499209f9a610aaa566644193e16bef4ee24c3
- SHA256
  
  84d5a9bdbe6311cbd8924e1597d4647025f10c720b03c3f5e37040bcbd983fe5
- SHA512
  
  7fa1500fc443c06ed8845ba51ab14fabbbbad710fd61e6be6957b7e0e7b35c701ac50d28797b457ae4cb8c83781e3c8346473dcd4c2b15a006fb2b22fa19b6e1
- SSDEEP
  
  6144:TRmQh7YWbNaxXv06kPvLoa32jc3qmpdtPpX:FmQs2Ll6mz
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2