6a1d5d9fce90cde67f48aa600e00dea78b165ecbf95d170edb08c55591e95790 | Triage

Sharing

General

Target

6a1d5d9fce90cde67f48aa600e00dea78b165ecbf95d170edb08c55591e95790
Size

227KB
Sample

221201-elndhaga4x
MD5

49ee034f33180bdd1e8d3e74887eafe0
SHA1

34f6e2d3dca282224e72bfc4368270ac56361611
SHA256

6a1d5d9fce90cde67f48aa600e00dea78b165ecbf95d170edb08c55591e95790
SHA512

a12bbc2192af96df9ec789a9e756d855899ffed71d9e679887a00cf7cc6348bb9bd8e67179a285969c74ea0485262d795764f9b39cd89ed2e0bdbaa1f989bd24
SSDEEP

6144:g6Uo7/Eu19O18HNv3TqkKGt5Db4j1ZZ1LMQ/:gC/Eq418HRDqkZkBZ/M0

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  6a1d5d9fce90cde67f48aa600e00dea78b165ecbf95d170edb08c55591e95790
- Size
  
  227KB
- MD5
  
  49ee034f33180bdd1e8d3e74887eafe0
- SHA1
  
  34f6e2d3dca282224e72bfc4368270ac56361611
- SHA256
  
  6a1d5d9fce90cde67f48aa600e00dea78b165ecbf95d170edb08c55591e95790
- SHA512
  
  a12bbc2192af96df9ec789a9e756d855899ffed71d9e679887a00cf7cc6348bb9bd8e67179a285969c74ea0485262d795764f9b39cd89ed2e0bdbaa1f989bd24
- SSDEEP
  
  6144:g6Uo7/Eu19O18HNv3TqkKGt5Db4j1ZZ1LMQ/:gC/Eq418HRDqkZkBZ/M0
Score

8^/10

persistence
- Executes dropped EXE
- Modifies AppInit DLL entries
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2