b2e071ddc965abc1ec26939b320ab57e58d06e03dfccf97b6a3e22370dbc15cd | Triage

Sharing

General

Target

b2e071ddc965abc1ec26939b320ab57e58d06e03dfccf97b6a3e22370dbc15cd
Size

20.1MB
Sample

221126-legeyagc57
MD5

cb0f33c7ffdb7b89670d22a7821da70e
SHA1

de3dbe02dc5181bbaa0d5bfa08b235aa2d2a9a39
SHA256

b2e071ddc965abc1ec26939b320ab57e58d06e03dfccf97b6a3e22370dbc15cd
SHA512

35a96a9fc5c7aae0d7c8782c0f31a97185e64bdefc79b343f12037f34853da2f58a62c461885ba390e972402cb15ab9e9296b86de48270518ea574c10de8aa6c
SSDEEP

393216:5YlRwApzdWsqfTjjnkCytcQI86ndCEis7NrXmwakeJPC/NQo+Nqj6zQ7cM:ilePfPTk/t686dCEisl2w9sCGoQqjqQH

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  Advanced.PDF.Password.Recovery.v5.0.0-Crack/APDFPR_setup.exe
- Size
  
  40.1MB
- MD5
  
  c429458ccc6d8ff30eded905e535a4a5
- SHA1
  
  1082d198318015d82e035d1e4ea6f687605a6123
- SHA256
  
  d6e9a4a04a0b7bc0a58f616435fc609e3bf78111111d2fca613ddc65b0c2f891
- SHA512
  
  b35b02347ecd930b183c49c42c4adde4543b3a473d553ff0492473df44b61f68bdc3a7db59d6dd71492a369c119fc3831056bb725fa9d892df9a6448d27cee62
- SSDEEP
  
  393216:HEuRgRZ0NgwD+D0cl7EqiMl1KB3HxGhpFTHa0I8VTy21XKZBh4lRe:vRaZ27Dumqf43xGh20zNy82B2Re
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2