933db0788026f212b2fcfec027024344cd8b843a00c6fdd834d5c31c1fcff833 | Triage

Sharing

General

Target

933db0788026f212b2fcfec027024344cd8b843a00c6fdd834d5c31c1fcff833
Size

127KB
Sample

221201-azssxsdb3t
MD5

9ad3d97eb3aab4ac69bb7a80582244d3
SHA1

0a90ec3bc6d3913968d169bbb62d8eda9192e715
SHA256

933db0788026f212b2fcfec027024344cd8b843a00c6fdd834d5c31c1fcff833
SHA512

3374229c810ac59ad2b7ba2fe5c04bf844fd9c063a91e952b056fbdf66e61ddfc597a311a03c29943a903305af35b64b97fccb1288e5c76b0b8514f53ad04e33
SSDEEP

1536:1bwfX/d/D6V5WpetAxplna5bdOALzQO/kzvE9l8f+iou2c7T7EPldgx:1bo/AWpetAxpVaBQOszvWQLr7TSkx

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  933db0788026f212b2fcfec027024344cd8b843a00c6fdd834d5c31c1fcff833
- Size
  
  127KB
- MD5
  
  9ad3d97eb3aab4ac69bb7a80582244d3
- SHA1
  
  0a90ec3bc6d3913968d169bbb62d8eda9192e715
- SHA256
  
  933db0788026f212b2fcfec027024344cd8b843a00c6fdd834d5c31c1fcff833
- SHA512
  
  3374229c810ac59ad2b7ba2fe5c04bf844fd9c063a91e952b056fbdf66e61ddfc597a311a03c29943a903305af35b64b97fccb1288e5c76b0b8514f53ad04e33
- SSDEEP
  
  1536:1bwfX/d/D6V5WpetAxplna5bdOALzQO/kzvE9l8f+iou2c7T7EPldgx:1bo/AWpetAxpVaBQOszvWQLr7TSkx
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2