3404b9793209c010225037babf5ff3d679405931e77ffe840fe7eb8d1b532914 | Triage

Sharing

General

Target

3404b9793209c010225037babf5ff3d679405931e77ffe840fe7eb8d1b532914
Size

1.5MB
Sample

221202-aksjlshh9w
MD5

6ec6e197a021fdc94ea1fda34e31f1f0
SHA1

26f6640afeb4a53918dc43aacd01a386dd60c0bd
SHA256

3404b9793209c010225037babf5ff3d679405931e77ffe840fe7eb8d1b532914
SHA512

5164878b4d28e37b91cac72f725d5113e966edefbd8a73bb83f9dc7330a094e8bfde0e52710bf28e58690276e6fbb7e73de367c6ff829ea6c3490aa8e3eee039
SSDEEP

24576:OEOq5wPA/FY5ciDsJ1WEKkSBljfAaCKCssJQKvajNr02beRr:Z0Sy58J1WEKkSBVAeaQTNLeRr

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  3404b9793209c010225037babf5ff3d679405931e77ffe840fe7eb8d1b532914
- Size
  
  1.5MB
- MD5
  
  6ec6e197a021fdc94ea1fda34e31f1f0
- SHA1
  
  26f6640afeb4a53918dc43aacd01a386dd60c0bd
- SHA256
  
  3404b9793209c010225037babf5ff3d679405931e77ffe840fe7eb8d1b532914
- SHA512
  
  5164878b4d28e37b91cac72f725d5113e966edefbd8a73bb83f9dc7330a094e8bfde0e52710bf28e58690276e6fbb7e73de367c6ff829ea6c3490aa8e3eee039
- SSDEEP
  
  24576:OEOq5wPA/FY5ciDsJ1WEKkSBljfAaCKCssJQKvajNr02beRr:Z0Sy58J1WEKkSBVAeaQTNLeRr
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2