b9d445850f389a2538a6b4e7671af74ee08d0b1b44437f0adec7ae53096d2d4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9d445850f389a2538a6b4e7671af74ee08d0b1b44437f0adec7ae53096d2d4a
Size

53KB
Sample

221203-g9zgsacb86
MD5

d5fae33e1ae2bd8a67ef332dbb089992
SHA1

85d80e796b8843d3151172d358ab7e3e7c9ae1c1
SHA256

b9d445850f389a2538a6b4e7671af74ee08d0b1b44437f0adec7ae53096d2d4a
SHA512

0eb50d2de21bf9ac9e2d9ecf0b584b674b179e8fab119ef4fc2774565515f89bb23cd4ec7248ea76234fdf7fb350e6fb5351b8a2ef4d5a87fc0b1760fa91a5d8
SSDEEP

768:3wPTxLgx8EKs+i9xWElGGeaFlJsD+jzWee3Wp/tZNh9+HjRuDJTQAkQpHUK1ruZZ:3ILvs+iVqGJi+XHe3ifzKjkV3pB1uCO

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b9d445850f389a2538a6b4e7671af74ee08d0b1b44437f0adec7ae53096d2d4a
- Size
  
  53KB
- MD5
  
  d5fae33e1ae2bd8a67ef332dbb089992
- SHA1
  
  85d80e796b8843d3151172d358ab7e3e7c9ae1c1
- SHA256
  
  b9d445850f389a2538a6b4e7671af74ee08d0b1b44437f0adec7ae53096d2d4a
- SHA512
  
  0eb50d2de21bf9ac9e2d9ecf0b584b674b179e8fab119ef4fc2774565515f89bb23cd4ec7248ea76234fdf7fb350e6fb5351b8a2ef4d5a87fc0b1760fa91a5d8
- SSDEEP
  
  768:3wPTxLgx8EKs+i9xWElGGeaFlJsD+jzWee3Wp/tZNh9+HjRuDJTQAkQpHUK1ruZZ:3ILvs+iVqGJi+XHe3ifzKjkV3pB1uCO
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2