9b0ea391bbf6e9d432e9db5bfedc3a70dde46858d8db77bab0abac10e1871321 | Triage

Sharing

General

Target

9b0ea391bbf6e9d432e9db5bfedc3a70dde46858d8db77bab0abac10e1871321
Size

284KB
Sample

221203-1x5ykshd96
MD5

98f42963beb8c87b6e495ba807bc1cb2
SHA1

e5bdf17473779e9884de7818d7ce9c1e39a82015
SHA256

9b0ea391bbf6e9d432e9db5bfedc3a70dde46858d8db77bab0abac10e1871321
SHA512

fafd743234d2a91b48899f038552509b5842c1b28a16ac79b79c45cb7e88b477aa9995a2d6cf1c968de75ca2f7691708f7db4071a90793b36492bd4121318f61
SSDEEP

6144:FcL3oOaCI/+6W913yLmanlNj+bVXknpbAbVXknpbAbVXknpbAbVSKM/:yz6W91CLmanlNj+BXE5ABXE5ABXE5ABE

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  9b0ea391bbf6e9d432e9db5bfedc3a70dde46858d8db77bab0abac10e1871321
- Size
  
  284KB
- MD5
  
  98f42963beb8c87b6e495ba807bc1cb2
- SHA1
  
  e5bdf17473779e9884de7818d7ce9c1e39a82015
- SHA256
  
  9b0ea391bbf6e9d432e9db5bfedc3a70dde46858d8db77bab0abac10e1871321
- SHA512
  
  fafd743234d2a91b48899f038552509b5842c1b28a16ac79b79c45cb7e88b477aa9995a2d6cf1c968de75ca2f7691708f7db4071a90793b36492bd4121318f61
- SSDEEP
  
  6144:FcL3oOaCI/+6W913yLmanlNj+bVXknpbAbVXknpbAbVXknpbAbVSKM/:yz6W91CLmanlNj+BXE5ABXE5ABXE5ABE
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2