c2955cfb56cbfcacce0b02a3ee62a59b46d13e11d843c645a4f4a42d84d6e269 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2955cfb56cbfcacce0b02a3ee62a59b46d13e11d843c645a4f4a42d84d6e269
Size

90KB
Sample

221202-14hrmahg49
MD5

59af089477d79ee517afe22a8fd0da57
SHA1

6d6a7f24f4f533907fbc289965ed105b82949837
SHA256

c2955cfb56cbfcacce0b02a3ee62a59b46d13e11d843c645a4f4a42d84d6e269
SHA512

dacbe0148c14e5af35026cc7ca479678e9727d79d17962b90d283bae632f57ad897ac4e28f6515d9230f99c210d1c018b61c88e8dd2a1b87de70056c4eacc33f
SSDEEP

1536:FQvdqjODF780Iet/7UmdZizub7jkVkX7VaI4o7rhoWS1jcQnoUPf8JlI9F:FQvtJ7xIazUmdMu3gVhDo/KWEvo/JlID

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  c2955cfb56cbfcacce0b02a3ee62a59b46d13e11d843c645a4f4a42d84d6e269
- Size
  
  90KB
- MD5
  
  59af089477d79ee517afe22a8fd0da57
- SHA1
  
  6d6a7f24f4f533907fbc289965ed105b82949837
- SHA256
  
  c2955cfb56cbfcacce0b02a3ee62a59b46d13e11d843c645a4f4a42d84d6e269
- SHA512
  
  dacbe0148c14e5af35026cc7ca479678e9727d79d17962b90d283bae632f57ad897ac4e28f6515d9230f99c210d1c018b61c88e8dd2a1b87de70056c4eacc33f
- SSDEEP
  
  1536:FQvdqjODF780Iet/7UmdZizub7jkVkX7VaI4o7rhoWS1jcQnoUPf8JlI9F:FQvtJ7xIazUmdMu3gVhDo/KWEvo/JlID
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2