9c7c1b3efe6383c3ffd283f74bb44149eaf408e79ac3f0775925d63d8765255d | Triage

Sharing

General

Target

9c7c1b3efe6383c3ffd283f74bb44149eaf408e79ac3f0775925d63d8765255d
Size

27KB
Sample

221203-abhcaaga64
MD5

e674fc01c9972650c301861415c18460
SHA1

5265a42d368b208f10b14efab1ef5cb02d44d230
SHA256

9c7c1b3efe6383c3ffd283f74bb44149eaf408e79ac3f0775925d63d8765255d
SHA512

d6f7c43da1b57f08d7683e50b71fa90a4996cf48f115dd4cfc479b9272370ec90e6bbeb94f8fed76050ea35dd0f56b3c3eb1cc5e95335542cbb3ace333a64ec7
SSDEEP

384:1/yASy0m2N4tlJQNPi20Q/IdPc8zuP/qQbDOJBpbmXwkIvuwHjCYe:S0lJwPi5Q/IVZu3qVmf2e

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  9c7c1b3efe6383c3ffd283f74bb44149eaf408e79ac3f0775925d63d8765255d
- Size
  
  27KB
- MD5
  
  e674fc01c9972650c301861415c18460
- SHA1
  
  5265a42d368b208f10b14efab1ef5cb02d44d230
- SHA256
  
  9c7c1b3efe6383c3ffd283f74bb44149eaf408e79ac3f0775925d63d8765255d
- SHA512
  
  d6f7c43da1b57f08d7683e50b71fa90a4996cf48f115dd4cfc479b9272370ec90e6bbeb94f8fed76050ea35dd0f56b3c3eb1cc5e95335542cbb3ace333a64ec7
- SSDEEP
  
  384:1/yASy0m2N4tlJQNPi20Q/IdPc8zuP/qQbDOJBpbmXwkIvuwHjCYe:S0lJwPi5Q/IVZu3qVmf2e
Score

8^/10

persistence
- Blocklisted process makes network request
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2