1641c63f9ce3d43311abf8257da1ceae424259f6dcb562cf9da3787b16feb42d | Triage

Sharing

General

Target

1641c63f9ce3d43311abf8257da1ceae424259f6dcb562cf9da3787b16feb42d
Size

128KB
Sample

221128-d9qm4acc74
MD5

8d78fe486a0c1dd418b5d50cc40c68e1
SHA1

7196f374cac1a1f13de84c4e6a22799936f914fd
SHA256

1641c63f9ce3d43311abf8257da1ceae424259f6dcb562cf9da3787b16feb42d
SHA512

1854d233a4cd1ab837c4eead114f440aaf92468df5346de137a0aeb33be63ee53fc1fa13a4787d9b0c3bbbd080531cf7ebd72efcd46a5097f63951bd55188628
SSDEEP

3072:0dGfhki0Sg4p5d5LSJ0NpCkvaIwrcixkqelnyQVYoP4vVyU:QihQS6wQIgcixClyQf6yU

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  RG928200002_2014_november_00000329320.023042490280.0324980000038-0000006.exe
- Size
  
  196KB
- MD5
  
  7c401bde8cafc5b745b9f65effbd588f
- SHA1
  
  b5691ee02fb8560e6143785087ce465e0c88cf08
- SHA256
  
  47b2a9c7db77b6cd600ffaa2f4691cd772c1a703477b9906942ceda5fb2edb0d
- SHA512
  
  10cf7eaf9da0692f91ae8f8a42a970c9083605440c733ff8220f5f9d3783c74e0c94713e83a9b0341289a30d23ba843a18a828601e4d2699ad8b1fe0ea1be3a1
- SSDEEP
  
  3072:tj6nX6bQwg4p5d5LSJ0NpCkvYIwrcixkqelXjChTW3JbbeGI6Ja:90qcw6wKIgcixClzChKoGLa
Score

7^/10

persistence
- Deletes itself
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2