1ecd72fa361615d03d535e7251a91c7a013229fd497c5fdd06bf4433f99ac06a | Triage

Sharing

General

Target

1ecd72fa361615d03d535e7251a91c7a013229fd497c5fdd06bf4433f99ac06a
Size

636KB
Sample

221124-ppdctage6z
MD5

5236a22ca5b40c11abfb5f33024047a5
SHA1

04458693b6ace6722464c2633d5967fdbb5fabd2
SHA256

1ecd72fa361615d03d535e7251a91c7a013229fd497c5fdd06bf4433f99ac06a
SHA512

7fc693d94600bf64df82f2398c8e4704270f4e54a8df614f693fb11ca87eda149beca34840a093a428c61e1ccd5d348afd7c53e40a7c950b073b840bfafd43a6
SSDEEP

12288:hi5eQV13f0H3pNnNgTHaL3nk/TiJnemzuU99Znby:h8Blf0nu6rQiJnTnw

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  1ecd72fa361615d03d535e7251a91c7a013229fd497c5fdd06bf4433f99ac06a
- Size
  
  636KB
- MD5
  
  5236a22ca5b40c11abfb5f33024047a5
- SHA1
  
  04458693b6ace6722464c2633d5967fdbb5fabd2
- SHA256
  
  1ecd72fa361615d03d535e7251a91c7a013229fd497c5fdd06bf4433f99ac06a
- SHA512
  
  7fc693d94600bf64df82f2398c8e4704270f4e54a8df614f693fb11ca87eda149beca34840a093a428c61e1ccd5d348afd7c53e40a7c950b073b840bfafd43a6
- SSDEEP
  
  12288:hi5eQV13f0H3pNnNgTHaL3nk/TiJnemzuU99Znby:h8Blf0nu6rQiJnTnw
Score

8^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2