2dc6c7e0ac764dc62ad468eb81155669fc515bfb84f8706a5e921268890a75d9 | Triage

Sharing

General

Target

2dc6c7e0ac764dc62ad468eb81155669fc515bfb84f8706a5e921268890a75d9
Size

117KB
Sample

221125-dvstxabh6x
MD5

b43a00e14a8531efcd58c7b36dd8bc68
SHA1

53095277280ad29f8b06b49481ea0f9659b7cf78
SHA256

2dc6c7e0ac764dc62ad468eb81155669fc515bfb84f8706a5e921268890a75d9
SHA512

44315eae3b06fdd1c04e6547b7b094da21ad1b2bdaf979045ef802d2b258465ab56a69e3dc7b0ced94f7e349e750255a63db8d6ee155f751abbf152ea68d3b87
SSDEEP

1536:0cy+ExyoD6GLQ+jMcahC04jzJ7kBORMqFr9Mf4wScf+2hiFh6fFU1MjmVop:01xumdxjzJ7kBORMqFr9KXScm2hiWicp

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  2dc6c7e0ac764dc62ad468eb81155669fc515bfb84f8706a5e921268890a75d9
- Size
  
  117KB
- MD5
  
  b43a00e14a8531efcd58c7b36dd8bc68
- SHA1
  
  53095277280ad29f8b06b49481ea0f9659b7cf78
- SHA256
  
  2dc6c7e0ac764dc62ad468eb81155669fc515bfb84f8706a5e921268890a75d9
- SHA512
  
  44315eae3b06fdd1c04e6547b7b094da21ad1b2bdaf979045ef802d2b258465ab56a69e3dc7b0ced94f7e349e750255a63db8d6ee155f751abbf152ea68d3b87
- SSDEEP
  
  1536:0cy+ExyoD6GLQ+jMcahC04jzJ7kBORMqFr9Mf4wScf+2hiFh6fFU1MjmVop:01xumdxjzJ7kBORMqFr9KXScm2hiWicp
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2