0658e06a29228419c2d14eb980d3d25744354b99dd10ef155836c1d3c9391fa5 | Triage

Sharing

General

Target

0658e06a29228419c2d14eb980d3d25744354b99dd10ef155836c1d3c9391fa5
Size

572KB
Sample

221129-m7xs3afg5t
MD5

9051b557b61558ec0e2170e1f8ee7490
SHA1

a906028b8702dc409ca3348826b83a57675dc86f
SHA256

0658e06a29228419c2d14eb980d3d25744354b99dd10ef155836c1d3c9391fa5
SHA512

f89d19cf848c833f87afbbd2a57442bb057a4a847bdae7bc2dc2c068bea92b9bb83ca168fac2c90c4bb610a7d3b2e5856a6be5424badfe36d597b185e6119419
SSDEEP

12288:HE5adJFAgBv3r+TMP10fWdNHKKWZIe7qM5kN5cEXYUBGc:HBjFAgBv3r+TMP106NqKWZ7qM5kNHXYm

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  0658e06a29228419c2d14eb980d3d25744354b99dd10ef155836c1d3c9391fa5
- Size
  
  572KB
- MD5
  
  9051b557b61558ec0e2170e1f8ee7490
- SHA1
  
  a906028b8702dc409ca3348826b83a57675dc86f
- SHA256
  
  0658e06a29228419c2d14eb980d3d25744354b99dd10ef155836c1d3c9391fa5
- SHA512
  
  f89d19cf848c833f87afbbd2a57442bb057a4a847bdae7bc2dc2c068bea92b9bb83ca168fac2c90c4bb610a7d3b2e5856a6be5424badfe36d597b185e6119419
- SSDEEP
  
  12288:HE5adJFAgBv3r+TMP10fWdNHKKWZIe7qM5kN5cEXYUBGc:HBjFAgBv3r+TMP106NqKWZ7qM5kNHXYm
Score

8^/10

persistence
- Sets DLL path for service in the registry
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2