009d3346b682496a6835a66cc5d3d9a24e3a21006ec576f55fc5ce310c4099bf | Triage

Sharing

General

Target

009d3346b682496a6835a66cc5d3d9a24e3a21006ec576f55fc5ce310c4099bf
Size

161KB
Sample

221127-mvrfhsbc33
MD5

506778d135b98d06f901ded7776b0e76
SHA1

cfbe8983fc0a2a50dd52fcf2ba303930fffb000b
SHA256

009d3346b682496a6835a66cc5d3d9a24e3a21006ec576f55fc5ce310c4099bf
SHA512

c05d8efd7034d9cb22c475ef341c2d74f64b0dc47e472b5dd12aed96332cabbb889fd90fa4bab6a1ac6aee24c712f5293b0b238f71d7b731324bdb1c32617d28
SSDEEP

3072:O1UqeDPErbBYTN6jZ4fReG6NkHqQTtwRc6GCCT/oQXbTlOf/mdQgUfd:OuqeDPE/BYGkV6NkHq4wpGsYbTi/8Qgw

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  009d3346b682496a6835a66cc5d3d9a24e3a21006ec576f55fc5ce310c4099bf
- Size
  
  161KB
- MD5
  
  506778d135b98d06f901ded7776b0e76
- SHA1
  
  cfbe8983fc0a2a50dd52fcf2ba303930fffb000b
- SHA256
  
  009d3346b682496a6835a66cc5d3d9a24e3a21006ec576f55fc5ce310c4099bf
- SHA512
  
  c05d8efd7034d9cb22c475ef341c2d74f64b0dc47e472b5dd12aed96332cabbb889fd90fa4bab6a1ac6aee24c712f5293b0b238f71d7b731324bdb1c32617d28
- SSDEEP
  
  3072:O1UqeDPErbBYTN6jZ4fReG6NkHqQTtwRc6GCCT/oQXbTlOf/mdQgUfd:OuqeDPE/BYGkV6NkHq4wpGsYbTi/8Qgw
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2