f8891f8e330eff8fc7f6311c893c5b3b9d348d9677947ba2e190e65aebb7ecb1 | Triage

Sharing

General

Target

f8891f8e330eff8fc7f6311c893c5b3b9d348d9677947ba2e190e65aebb7ecb1
Size

3.3MB
Sample

221124-rwj52sdh9t
MD5

d51d2ae27240253d256eb407146b0b95
SHA1

4ef90358186ff8c336b9cba939518bcb79a8c22f
SHA256

f8891f8e330eff8fc7f6311c893c5b3b9d348d9677947ba2e190e65aebb7ecb1
SHA512

9dbe71eba2605f3cecbb49767121843c13070ebe3d08b71855efb12a108c0637a5a21b8f3454f48789d99727e8ed28856ccc3f4da75d3c0c0b726994ddce2add
SSDEEP

98304:33YobVRxj94j/JpY6A7PFLiWg5RxjUZzc:nYeujnY6aIrYZY

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  f8891f8e330eff8fc7f6311c893c5b3b9d348d9677947ba2e190e65aebb7ecb1
- Size
  
  3.3MB
- MD5
  
  d51d2ae27240253d256eb407146b0b95
- SHA1
  
  4ef90358186ff8c336b9cba939518bcb79a8c22f
- SHA256
  
  f8891f8e330eff8fc7f6311c893c5b3b9d348d9677947ba2e190e65aebb7ecb1
- SHA512
  
  9dbe71eba2605f3cecbb49767121843c13070ebe3d08b71855efb12a108c0637a5a21b8f3454f48789d99727e8ed28856ccc3f4da75d3c0c0b726994ddce2add
- SSDEEP
  
  98304:33YobVRxj94j/JpY6A7PFLiWg5RxjUZzc:nYeujnY6aIrYZY
Score

8^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2