bd17ffde38adac4b6fd5798fccbac0663ad0f742835b74ae195ac13de2974c53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd17ffde38adac4b6fd5798fccbac0663ad0f742835b74ae195ac13de2974c53
Size

185KB
Sample

221203-1thnwahb25
MD5

de0825cb81cfcc2b17354e163bf7e651
SHA1

bf360f36ff0d0babb21b2db8ac4d1dfaa53f7b2b
SHA256

bd17ffde38adac4b6fd5798fccbac0663ad0f742835b74ae195ac13de2974c53
SHA512

c6367bf4883f5e86b07457e0e5e3c14593a651d6e6eaddaf0b680553244788599021123c0500b3b79bda2f2c018453ff2e6d08d3f5614584ee4e1d34c5fad3e6
SSDEEP

3072:AKnE/XpRhMk9mYDKm7b5fhcF0zBEs5pJ5LRmSTOzhkFE8en92yZum5yqYia0Dsg:KHN9mu91hTqQDTOzgs2y35yqYPK

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  bd17ffde38adac4b6fd5798fccbac0663ad0f742835b74ae195ac13de2974c53
- Size
  
  185KB
- MD5
  
  de0825cb81cfcc2b17354e163bf7e651
- SHA1
  
  bf360f36ff0d0babb21b2db8ac4d1dfaa53f7b2b
- SHA256
  
  bd17ffde38adac4b6fd5798fccbac0663ad0f742835b74ae195ac13de2974c53
- SHA512
  
  c6367bf4883f5e86b07457e0e5e3c14593a651d6e6eaddaf0b680553244788599021123c0500b3b79bda2f2c018453ff2e6d08d3f5614584ee4e1d34c5fad3e6
- SSDEEP
  
  3072:AKnE/XpRhMk9mYDKm7b5fhcF0zBEs5pJ5LRmSTOzhkFE8en92yZum5yqYia0Dsg:KHN9mu91hTqQDTOzgs2y35yqYPK
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2