7e2be40cef77aa46551ffa927393cae72714a132eb6261e16d0afecdf53f28a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e2be40cef77aa46551ffa927393cae72714a132eb6261e16d0afecdf53f28a4
Size

110KB
Sample

221201-c3djhsga23
MD5

a595f1293d8c96c200465d98b1145805
SHA1

a53b0824321801a26a0e22d489f42d96fb8fc2b3
SHA256

7e2be40cef77aa46551ffa927393cae72714a132eb6261e16d0afecdf53f28a4
SHA512

ec14bffc0b433091a152f04ce3dd51560077980b86e038e59c0b1d4a2ca3f80ea89d14a64193a69b30d02384a7847e428ece1e5af54e41520cf14c1c3ea04aa1
SSDEEP

3072:SHE+0wOsKov0/MUEFAzjYn+EBMqhjj+GG:28ov0/aFiU+WMqhjiGG

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  7e2be40cef77aa46551ffa927393cae72714a132eb6261e16d0afecdf53f28a4
- Size
  
  110KB
- MD5
  
  a595f1293d8c96c200465d98b1145805
- SHA1
  
  a53b0824321801a26a0e22d489f42d96fb8fc2b3
- SHA256
  
  7e2be40cef77aa46551ffa927393cae72714a132eb6261e16d0afecdf53f28a4
- SHA512
  
  ec14bffc0b433091a152f04ce3dd51560077980b86e038e59c0b1d4a2ca3f80ea89d14a64193a69b30d02384a7847e428ece1e5af54e41520cf14c1c3ea04aa1
- SSDEEP
  
  3072:SHE+0wOsKov0/MUEFAzjYn+EBMqhjj+GG:28ov0/aFiU+WMqhjiGG
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2