af7c978196579d2d14db30a488bd1d89c147c9e7ab5b50aed730c515076751d1 | Triage

Sharing

General

Target

af7c978196579d2d14db30a488bd1d89c147c9e7ab5b50aed730c515076751d1
Size

361KB
Sample

221129-r67dbscg4v
MD5

562cbf4546a3f48af1f772502289edb1
SHA1

c2b9469d5d69b18a69aca5e22afd3f7dfa8c2b64
SHA256

af7c978196579d2d14db30a488bd1d89c147c9e7ab5b50aed730c515076751d1
SHA512

21e9c1809f4f503518dd0ce6815b5dbbd7fe415af7b49b93c15449b9fbfe5e9e95f9da7e8b407663a31989a9872923eb357ece892cbb4b581ba071201021fef8
SSDEEP

6144:1flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:1flfAsiVGjSGecvX

Score

10^/10

Malware Config

Targets

- Target
  
  af7c978196579d2d14db30a488bd1d89c147c9e7ab5b50aed730c515076751d1
- Size
  
  361KB
- MD5
  
  562cbf4546a3f48af1f772502289edb1
- SHA1
  
  c2b9469d5d69b18a69aca5e22afd3f7dfa8c2b64
- SHA256
  
  af7c978196579d2d14db30a488bd1d89c147c9e7ab5b50aed730c515076751d1
- SHA512
  
  21e9c1809f4f503518dd0ce6815b5dbbd7fe415af7b49b93c15449b9fbfe5e9e95f9da7e8b407663a31989a9872923eb357ece892cbb4b581ba071201021fef8
- SSDEEP
  
  6144:1flfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:1flfAsiVGjSGecvX
Score

10^/10
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2