66936b5913eb4845510491c6bb3ee1b653d7b51ec024ea3c591a65916dd64656 | Triage

Sharing

General

Target

66936b5913eb4845510491c6bb3ee1b653d7b51ec024ea3c591a65916dd64656
Size

208KB
Sample

221124-kh3xnsbg75
MD5

b773d5bfca53845dd4e3ee8108cee55e
SHA1

9d92b78247b2ffb9b385ad7cc302efc6cc92dbe5
SHA256

66936b5913eb4845510491c6bb3ee1b653d7b51ec024ea3c591a65916dd64656
SHA512

74dc501a297b5bc8f22a433b47d732b293bd681221fc95504db5e04d0f4f32a2bebf452e70164d4b898fdfc7182a49561b90448fb38067d19ffde5c1d1d10eab
SSDEEP

6144:D1HHL8uRokJtdCIo+K27GeGb2+gQN05Ic65t:BAuRoklnHK27Gvb2+N05I1

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  2014_11rechnung_K4768955881_pdf_sign_telekom_de_deutschland_gmbh.exe
- Size
  
  278KB
- MD5
  
  b650be9b84ff38f06f217ad982b8660d
- SHA1
  
  20c4b3e5dbe971309c3ec966e4e671d8c56580c5
- SHA256
  
  586ee2c334dff3ada56930d7de90999634893495ba8acd524273b955303b23fd
- SHA512
  
  d132fa2fc0cbbd1f03e9c83c06aef54ea5700ba648f6fa7a04b3bc235a65758d0168e72428820115e546cd6a785281253adf340444db22f79b4cffea45f31371
- SSDEEP
  
  6144:9iaYUpwXV9RIKWn/TUVs8oL48N8lqFzc+tRJSht4K:DzXrN8UbtPShiK
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2