16f071ababad93825e960511a747d3ac689e8e2553e70412d7b06ce0654c32ea | Triage

Sharing

General

Target

16f071ababad93825e960511a747d3ac689e8e2553e70412d7b06ce0654c32ea
Size

323KB
Sample

221127-aj5sjsae6s
MD5

df315c4f845030a9be7d1488876cc4e7
SHA1

2ca99ed76ac9a97a83408085c3595a0cc6bf64d8
SHA256

16f071ababad93825e960511a747d3ac689e8e2553e70412d7b06ce0654c32ea
SHA512

58a3ce33ace8d148f850f3323ab8e5e53e0104c5edd3cd63888235a385293c15c495b053e021ca89c5696da267f8788f397c47f9543088fef8da17de1a9f3b77
SSDEEP

3072:poFmKj6DlEELLIy6IUqMCIpOGqZPJbWTlAyiGaP7a68Z3BuzmdKfhcDSx7tXDL3g:2FIlEQInIUIJiTF/azaPniJfhcuRxw

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  16f071ababad93825e960511a747d3ac689e8e2553e70412d7b06ce0654c32ea
- Size
  
  323KB
- MD5
  
  df315c4f845030a9be7d1488876cc4e7
- SHA1
  
  2ca99ed76ac9a97a83408085c3595a0cc6bf64d8
- SHA256
  
  16f071ababad93825e960511a747d3ac689e8e2553e70412d7b06ce0654c32ea
- SHA512
  
  58a3ce33ace8d148f850f3323ab8e5e53e0104c5edd3cd63888235a385293c15c495b053e021ca89c5696da267f8788f397c47f9543088fef8da17de1a9f3b77
- SSDEEP
  
  3072:poFmKj6DlEELLIy6IUqMCIpOGqZPJbWTlAyiGaP7a68Z3BuzmdKfhcDSx7tXDL3g:2FIlEQInIUIJiTF/azaPniJfhcuRxw
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Drops startup file
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Remote System Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2