c6a1f55e24a25b1a3a57874bdc0726e65ef2a8063975900b036c4f7ad91257b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6a1f55e24a25b1a3a57874bdc0726e65ef2a8063975900b036c4f7ad91257b1
Size

3.2MB
Sample

221127-r3vv5aab7w
MD5

391c38f81c1f47c7d8f9e547d5c24169
SHA1

3ce253ed3e5ac4912fd918bbfaf08a80e8e102b8
SHA256

c6a1f55e24a25b1a3a57874bdc0726e65ef2a8063975900b036c4f7ad91257b1
SHA512

735ef6beabbe4116ffe3443ff8d8faa656695753d45e030999117f570f4e307b074459f0a28a447078e0c747846277faa4beb22dcaefd5e0854674d20d9f8021
SSDEEP

98304:ITlXAs3hiscGAEA4JTt/3FuK11TzQcJXb:y9iscjr4JTtNuK/Qw

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  c6a1f55e24a25b1a3a57874bdc0726e65ef2a8063975900b036c4f7ad91257b1
- Size
  
  3.2MB
- MD5
  
  391c38f81c1f47c7d8f9e547d5c24169
- SHA1
  
  3ce253ed3e5ac4912fd918bbfaf08a80e8e102b8
- SHA256
  
  c6a1f55e24a25b1a3a57874bdc0726e65ef2a8063975900b036c4f7ad91257b1
- SHA512
  
  735ef6beabbe4116ffe3443ff8d8faa656695753d45e030999117f570f4e307b074459f0a28a447078e0c747846277faa4beb22dcaefd5e0854674d20d9f8021
- SSDEEP
  
  98304:ITlXAs3hiscGAEA4JTt/3FuK11TzQcJXb:y9iscjr4JTtNuK/Qw
Score

8^/10

discovery persistence
- Modifies AppInit DLL entries
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence