404d15d395abf96e3b8809e4457aadd57764cf8c31d6aae56cb0b91d461bd5aa | Triage

Sharing

General

Target

404d15d395abf96e3b8809e4457aadd57764cf8c31d6aae56cb0b91d461bd5aa
Size

332KB
Sample

221125-cw29asee86
MD5

fa4dbd226111a4e33c0e4395ff80ffa5
SHA1

70de9d95715967dc944dbdbfc7c72a89eb3b9a52
SHA256

404d15d395abf96e3b8809e4457aadd57764cf8c31d6aae56cb0b91d461bd5aa
SHA512

e32b5b1a897f4e63388fb7fa3a4845680c4edd4e7884e837f649adbdeefaab131fee4eb5fbe52d658c661e73f679b5d5db8787a44442076156d5084ed119f206
SSDEEP

6144:74hWRpbNcudqgwoV699zChWMQj8MMMMMMe:iWuuYgwgiYMMMMMMe

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  404d15d395abf96e3b8809e4457aadd57764cf8c31d6aae56cb0b91d461bd5aa
- Size
  
  332KB
- MD5
  
  fa4dbd226111a4e33c0e4395ff80ffa5
- SHA1
  
  70de9d95715967dc944dbdbfc7c72a89eb3b9a52
- SHA256
  
  404d15d395abf96e3b8809e4457aadd57764cf8c31d6aae56cb0b91d461bd5aa
- SHA512
  
  e32b5b1a897f4e63388fb7fa3a4845680c4edd4e7884e837f649adbdeefaab131fee4eb5fbe52d658c661e73f679b5d5db8787a44442076156d5084ed119f206
- SSDEEP
  
  6144:74hWRpbNcudqgwoV699zChWMQj8MMMMMMe:iWuuYgwgiYMMMMMMe
Score

8^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2