9ffe14ba4d8ac776a42d2f2bf3bc7e8f80a77e01b13a2936e7261f251ad64aee | Triage

Sharing

General

Target

9ffe14ba4d8ac776a42d2f2bf3bc7e8f80a77e01b13a2936e7261f251ad64aee
Size

203KB
Sample

221127-zy471ahe67
MD5

d620351e595eadccaab053f5497a731f
SHA1

8ba99722f7b97b9c0b793863bac2a2ed024c553e
SHA256

9ffe14ba4d8ac776a42d2f2bf3bc7e8f80a77e01b13a2936e7261f251ad64aee
SHA512

f11552514ed1ff7be4f420d430d3ef2493c1135f08d139aa24f22afb6e2b1f65fb755fb20af384a69bb7be56779159545c6c4241917b25385c23e618937820f0
SSDEEP

6144:O8e34JpLuSSGCkTnbGKsXg6QJmEP3yzsNj:O8LIGCAbGKammEPwsNj

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  9ffe14ba4d8ac776a42d2f2bf3bc7e8f80a77e01b13a2936e7261f251ad64aee
- Size
  
  203KB
- MD5
  
  d620351e595eadccaab053f5497a731f
- SHA1
  
  8ba99722f7b97b9c0b793863bac2a2ed024c553e
- SHA256
  
  9ffe14ba4d8ac776a42d2f2bf3bc7e8f80a77e01b13a2936e7261f251ad64aee
- SHA512
  
  f11552514ed1ff7be4f420d430d3ef2493c1135f08d139aa24f22afb6e2b1f65fb755fb20af384a69bb7be56779159545c6c4241917b25385c23e618937820f0
- SSDEEP
  
  6144:O8e34JpLuSSGCkTnbGKsXg6QJmEP3yzsNj:O8LIGCAbGKammEPwsNj
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2