a74bbe9a0f32c96a9b4baf7f2e11898b20c79b721f421a706548a9bad17967af | Triage

Sharing

General

Target

a74bbe9a0f32c96a9b4baf7f2e11898b20c79b721f421a706548a9bad17967af
Size

287KB
Sample

221129-ecwzaafg51
MD5

8429b82e7b98b5b62c7097e9397df4e3
SHA1

f657adf3bacdd06e7e0df17ed00c551409bb5f47
SHA256

a74bbe9a0f32c96a9b4baf7f2e11898b20c79b721f421a706548a9bad17967af
SHA512

319e652db82ebb373e6a1d390c2f8abaeb0418f892a92ea530b11fab78421710462a95a9323b385eb0db64e631eb8078d641563bb3b1fe60512aea91395ba542
SSDEEP

6144:ZNGj4trzzzzzzQ5sZw53XF3RJHe/yz0IA3wtx29Rf6+B1DOg7C:ub5YwnhJH+yz0i29Rf6c1DX7C

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  a74bbe9a0f32c96a9b4baf7f2e11898b20c79b721f421a706548a9bad17967af
- Size
  
  287KB
- MD5
  
  8429b82e7b98b5b62c7097e9397df4e3
- SHA1
  
  f657adf3bacdd06e7e0df17ed00c551409bb5f47
- SHA256
  
  a74bbe9a0f32c96a9b4baf7f2e11898b20c79b721f421a706548a9bad17967af
- SHA512
  
  319e652db82ebb373e6a1d390c2f8abaeb0418f892a92ea530b11fab78421710462a95a9323b385eb0db64e631eb8078d641563bb3b1fe60512aea91395ba542
- SSDEEP
  
  6144:ZNGj4trzzzzzzQ5sZw53XF3RJHe/yz0IA3wtx29Rf6+B1DOg7C:ub5YwnhJH+yz0i29Rf6c1DX7C
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2