80d390425320ceeed5c2e405065f0ae0e998a5529b0a525751c6fee04b7b20e3 | Triage

Sharing

General

Target

80d390425320ceeed5c2e405065f0ae0e998a5529b0a525751c6fee04b7b20e3
Size

5.2MB
Sample

221127-cxtzbach27
MD5

8a8dd88a3d5b9bb3afb93800fa6eb1b8
SHA1

1a39024c1a6c7d02722caa1e0348525a5cd3b1a2
SHA256

80d390425320ceeed5c2e405065f0ae0e998a5529b0a525751c6fee04b7b20e3
SHA512

6a90030c26fc4bc21a4aedb69143a6c04f98aed717c346a85fc88989e6a99b9bbfced1e639b5ba213c133bcbdbe41a0b9d63fbdb3cf99cd123a474b291a87122
SSDEEP

98304:ncia/XLbLBfR8SoHU7uKPCtaBdpp1MZVnGdoGhJxGTtYJ84lbiWVOLv:nGb99vCt80QnotYJ84lbiWVOT

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  80d390425320ceeed5c2e405065f0ae0e998a5529b0a525751c6fee04b7b20e3
- Size
  
  5.2MB
- MD5
  
  8a8dd88a3d5b9bb3afb93800fa6eb1b8
- SHA1
  
  1a39024c1a6c7d02722caa1e0348525a5cd3b1a2
- SHA256
  
  80d390425320ceeed5c2e405065f0ae0e998a5529b0a525751c6fee04b7b20e3
- SHA512
  
  6a90030c26fc4bc21a4aedb69143a6c04f98aed717c346a85fc88989e6a99b9bbfced1e639b5ba213c133bcbdbe41a0b9d63fbdb3cf99cd123a474b291a87122
- SSDEEP
  
  98304:ncia/XLbLBfR8SoHU7uKPCtaBdpp1MZVnGdoGhJxGTtYJ84lbiWVOLv:nGb99vCt80QnotYJ84lbiWVOT
Score

8^/10

persistence
- Executes dropped EXE
- Drops startup file
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2