cf0d8f596eb82bbf085c9afc46b8bd74fea46f6e95f3a6b0b79fc4897aa4d8ed | Triage

Sharing

General

Target

cf0d8f596eb82bbf085c9afc46b8bd74fea46f6e95f3a6b0b79fc4897aa4d8ed
Size

146KB
Sample

221124-j811bsea4x
MD5

f6aa0c901434a4be64e260a1565cb13a
SHA1

50d0dd5cfd79f1fcc92c5ab1017a886ae4ea01c9
SHA256

cf0d8f596eb82bbf085c9afc46b8bd74fea46f6e95f3a6b0b79fc4897aa4d8ed
SHA512

4429fab4f93ad0d3b3bb7a6314c24f1773e04cab49e4f0392c0d6b5681e358e88b2c0bdb37ef5cac2ceee6cbefc9c7ef72c1f98fa0b0c7310c87e087af105844
SSDEEP

3072:guL4suyftDcmLDLYYJQEIigwkZM7QWtcJWjRzvNNcIdlwC09BJQF:guL48ftDcmHz7PgDZJkjRzVOqnUMF

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  RG928200002_2014_november_00000329320.023042490280.0324980000038-0000006.exe
- Size
  
  176KB
- MD5
  
  4a1d13a05a93cfaa8dd2627c696d2f0b
- SHA1
  
  173c81da2aab91f225f8eb5e8fcc87119be4eff0
- SHA256
  
  03f825726fdf3341bcfa36fcfd6dcd08e9d7ec3df982f7af9a290aa6f3c5647c
- SHA512
  
  29269b35d3b041ccf08d2351e4f3fa906ed396e5a880b357398f2f72ba7a20ff870531b2d7febaa1e4173412074d6bc7bee5723ad683011ee4a247fb683e7301
- SSDEEP
  
  3072:q6AMa+ceqZl+r4okWL23kjsZUQoRyV01WZIrLwwWyKdMd9zfp0T0:VfzsbWa3hZUHRHwwWy8UO4
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2