dd4765c8f58433b9de98da20b003e72e976b961451097042f7f216f93c32b1d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd4765c8f58433b9de98da20b003e72e976b961451097042f7f216f93c32b1d2
Size

3.3MB
Sample

221125-3ae5raha7z
MD5

3d7ebbe61d715ddac4f4f82430d2b132
SHA1

2b2f6dcc53ba7b581697f7faf9ba4865daa8f163
SHA256

dd4765c8f58433b9de98da20b003e72e976b961451097042f7f216f93c32b1d2
SHA512

f45820594983e9f4bc9ec6436734b965c3a9558e1e280fc06bf1f39c211d53413b8d17fa0c9cb7fffd793752c007904e91941efa15f949f9a232eb196a883ff2
SSDEEP

98304:wXnQOb93Pc+p/xkvgTt3oXFZ/DwJarwMga:WJZ3zpzpoXFWiwM

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  dd4765c8f58433b9de98da20b003e72e976b961451097042f7f216f93c32b1d2
- Size
  
  3.3MB
- MD5
  
  3d7ebbe61d715ddac4f4f82430d2b132
- SHA1
  
  2b2f6dcc53ba7b581697f7faf9ba4865daa8f163
- SHA256
  
  dd4765c8f58433b9de98da20b003e72e976b961451097042f7f216f93c32b1d2
- SHA512
  
  f45820594983e9f4bc9ec6436734b965c3a9558e1e280fc06bf1f39c211d53413b8d17fa0c9cb7fffd793752c007904e91941efa15f949f9a232eb196a883ff2
- SSDEEP
  
  98304:wXnQOb93Pc+p/xkvgTt3oXFZ/DwJarwMga:WJZ3zpzpoXFWiwM
Score

8^/10

discovery persistence
- Modifies AppInit DLL entries
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2