12b44b8759174ed673f181f23c304875e8385537a32fee05786270139202ad10 | Triage

Sharing

General

Target

12b44b8759174ed673f181f23c304875e8385537a32fee05786270139202ad10
Size

112KB
Sample

221201-ht8k7ahf9v
MD5

034c3f5affc58ed0a86cb69bb80a32b0
SHA1

b266cd59e01eeb8a7819547fee52b4f214184089
SHA256

12b44b8759174ed673f181f23c304875e8385537a32fee05786270139202ad10
SHA512

eadd9021954aa7f00bc93a7949509130eeda3ed3e3a8977e4497c144923d33458ba116bf4ac485955a7d01d3af96dd595b56ce166612d57fa4a5aafdbf4540c2
SSDEEP

1536:Xdkkxx9fBBwWZRyBF4O3rdiNirUyKoVWSYwdO3Re/JvRcI1LpiqBD6I:Xdkq5BBwW/yBFvxi8J3V+Re5R5BY6V

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  12b44b8759174ed673f181f23c304875e8385537a32fee05786270139202ad10
- Size
  
  112KB
- MD5
  
  034c3f5affc58ed0a86cb69bb80a32b0
- SHA1
  
  b266cd59e01eeb8a7819547fee52b4f214184089
- SHA256
  
  12b44b8759174ed673f181f23c304875e8385537a32fee05786270139202ad10
- SHA512
  
  eadd9021954aa7f00bc93a7949509130eeda3ed3e3a8977e4497c144923d33458ba116bf4ac485955a7d01d3af96dd595b56ce166612d57fa4a5aafdbf4540c2
- SSDEEP
  
  1536:Xdkkxx9fBBwWZRyBF4O3rdiNirUyKoVWSYwdO3Re/JvRcI1LpiqBD6I:Xdkq5BBwW/yBFvxi8J3V+Re5R5BY6V
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2