b31724e8f348b42a88170790f384cb1999f64888df74418c7bf59dc52c92f70a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b31724e8f348b42a88170790f384cb1999f64888df74418c7bf59dc52c92f70a
Size

299KB
Sample

221128-c3snfadb7z
MD5

b30f94ada7710f5067d23668b9102626
SHA1

0f67516852a34930787aac9f17774335d5b150c6
SHA256

b31724e8f348b42a88170790f384cb1999f64888df74418c7bf59dc52c92f70a
SHA512

c98671a0b3696130ea12ab3d2c0f95f75bd18441e96499477153ee87fa272e10652a1fe4a26eedac3fb325eb0d74c25d09ed3d0715b7d5253cd4ce8a56985205
SSDEEP

6144:Z/5v+hUIfM9Bk54SrbUyCq/fUmWfwB06Z/3r0v5g7uIy8jkG5T3Hbzysg5:V5v+infW4wUyCqDV0aj0v8uSPH

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b31724e8f348b42a88170790f384cb1999f64888df74418c7bf59dc52c92f70a
- Size
  
  299KB
- MD5
  
  b30f94ada7710f5067d23668b9102626
- SHA1
  
  0f67516852a34930787aac9f17774335d5b150c6
- SHA256
  
  b31724e8f348b42a88170790f384cb1999f64888df74418c7bf59dc52c92f70a
- SHA512
  
  c98671a0b3696130ea12ab3d2c0f95f75bd18441e96499477153ee87fa272e10652a1fe4a26eedac3fb325eb0d74c25d09ed3d0715b7d5253cd4ce8a56985205
- SSDEEP
  
  6144:Z/5v+hUIfM9Bk54SrbUyCq/fUmWfwB06Z/3r0v5g7uIy8jkG5T3Hbzysg5:V5v+infW4wUyCqDV0aj0v8uSPH
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2