ad16cd972d51921ed61f2885101576155a1a3193c50bb28519da97f45c25c1d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad16cd972d51921ed61f2885101576155a1a3193c50bb28519da97f45c25c1d9
Size

146KB
Sample

221129-dwtslaec8w
MD5

66fff0911f6e624ce2afba6874c6a0f4
SHA1

ccea49ace698c6486ad72a9010ce2ac8c8fdd7b7
SHA256

ad16cd972d51921ed61f2885101576155a1a3193c50bb28519da97f45c25c1d9
SHA512

f0d8847949f04c3740d9a285dc615bf50ead736ed4d2e4e4792e548c3cf771e5a3f27253f0385a7b96be26e7af9935d52a89a651c423ca4a7a2c589b1e8ab255
SSDEEP

3072:PRu/X9XMurgnqM4xf3yAqqTGSfeLrLInQeikcvwvQe0WFX9UeHSzzu:PRu/X9cSM4xaAzKSfecy5ovQeFqeHSzz

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  ad16cd972d51921ed61f2885101576155a1a3193c50bb28519da97f45c25c1d9
- Size
  
  146KB
- MD5
  
  66fff0911f6e624ce2afba6874c6a0f4
- SHA1
  
  ccea49ace698c6486ad72a9010ce2ac8c8fdd7b7
- SHA256
  
  ad16cd972d51921ed61f2885101576155a1a3193c50bb28519da97f45c25c1d9
- SHA512
  
  f0d8847949f04c3740d9a285dc615bf50ead736ed4d2e4e4792e548c3cf771e5a3f27253f0385a7b96be26e7af9935d52a89a651c423ca4a7a2c589b1e8ab255
- SSDEEP
  
  3072:PRu/X9XMurgnqM4xf3yAqqTGSfeLrLInQeikcvwvQe0WFX9UeHSzzu:PRu/X9cSM4xaAzKSfecy5ovQeFqeHSzz
Score

8^/10

persistence
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2