624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4 | Triage

Sharing

General

Target

624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4
Size

344KB
Sample

221129-kffz5afd7z
MD5

6f92ab139123e273ba83a8d3626eeeec
SHA1

9edc4d5abb082bf18038d296d8b48fc3bdffdeb2
SHA256

624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4
SHA512

d83c28927b84e381260231ec1e02c64a32b1edd1a5d6b0174d12805c1856a31ecaa478f0218d7d564eb2b0e8df0b5ed7f746a81bdeb8c41efa1dcae9d8b53175
SSDEEP

6144:V3zAZMO0+ABsQB+TEOHgxTwoPO+boMfn+MohSQLfn7SaXmEGYq:00pQZA6oPO+7v+MOSQLfnTW7Yq

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4
- Size
  
  344KB
- MD5
  
  6f92ab139123e273ba83a8d3626eeeec
- SHA1
  
  9edc4d5abb082bf18038d296d8b48fc3bdffdeb2
- SHA256
  
  624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4
- SHA512
  
  d83c28927b84e381260231ec1e02c64a32b1edd1a5d6b0174d12805c1856a31ecaa478f0218d7d564eb2b0e8df0b5ed7f746a81bdeb8c41efa1dcae9d8b53175
- SSDEEP
  
  6144:V3zAZMO0+ABsQB+TEOHgxTwoPO+boMfn+MohSQLfn7SaXmEGYq:00pQZA6oPO+7v+MOSQLfnTW7Yq
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2