ae6287c078c5c6426a12723e67951ce1820a0eb1af1c176a1d3fecc7a699614a | Triage

Sharing

General

Target

ae6287c078c5c6426a12723e67951ce1820a0eb1af1c176a1d3fecc7a699614a
Size

666KB
Sample

221125-pnjs7sbf21
MD5

a500d3575e09c282cc97b9d60d5270c6
SHA1

9926800d8436264b7d78b45f41ed071f3469aaa8
SHA256

ae6287c078c5c6426a12723e67951ce1820a0eb1af1c176a1d3fecc7a699614a
SHA512

6cdafad189a8e5cfe5fe05c62b28120d0c69296570b0d3317e9196324255cf045b1d18614ef89e8f34891987584159796499b30b1dee69252ddad097d2e92f99
SSDEEP

12288:UBPgEfxixsIbWME80+YAKK54ygTGI0JwT8TOG6V4W8KorWeIqZxS2sBxcHQgEyqW:UBAbWME80vAxHgTuyTuOGiF8rqePW2lz

Score

9^/10

persistence

Malware Config

Targets

- Target
  
  ae6287c078c5c6426a12723e67951ce1820a0eb1af1c176a1d3fecc7a699614a
- Size
  
  666KB
- MD5
  
  a500d3575e09c282cc97b9d60d5270c6
- SHA1
  
  9926800d8436264b7d78b45f41ed071f3469aaa8
- SHA256
  
  ae6287c078c5c6426a12723e67951ce1820a0eb1af1c176a1d3fecc7a699614a
- SHA512
  
  6cdafad189a8e5cfe5fe05c62b28120d0c69296570b0d3317e9196324255cf045b1d18614ef89e8f34891987584159796499b30b1dee69252ddad097d2e92f99
- SSDEEP
  
  12288:UBPgEfxixsIbWME80+YAKK54ygTGI0JwT8TOG6V4W8KorWeIqZxS2sBxcHQgEyqW:UBAbWME80vAxHgTuyTuOGiF8rqePW2lz
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2