gh0strat | f17e4f6789661a1e826a479d149ffecd19ccdfcbd7c01471cb02fbf1f4053cd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f17e4f6789661a1e826a479d149ffecd19ccdfcbd7c01471cb02fbf1f4053cd7
Size

488KB
Sample

221203-nhh42seg97
MD5

34c70ed2a8969940888a50ef5e1c4a61
SHA1

04b77b17ccc93f9103bd5b0f612f3c8784374f40
SHA256

f17e4f6789661a1e826a479d149ffecd19ccdfcbd7c01471cb02fbf1f4053cd7
SHA512

1407dc0612afd0290489086b5d252a6e055b4904d6f4ea4c0f626da6691f37823f381040757a553cdb75d70d3c8ef35845c6c7c88055f28731ac29a96effc73e
SSDEEP

12288:TLOZVQQxfnr+TK7r79/loLWeFcPRLElOM5aLc:T4VQQxfnr+TK7r79/loBF2R+OM5aLc

Score

10^/10

gh0strat persistence

Malware Config

Targets

- Target
  
  f17e4f6789661a1e826a479d149ffecd19ccdfcbd7c01471cb02fbf1f4053cd7
- Size
  
  488KB
- MD5
  
  34c70ed2a8969940888a50ef5e1c4a61
- SHA1
  
  04b77b17ccc93f9103bd5b0f612f3c8784374f40
- SHA256
  
  f17e4f6789661a1e826a479d149ffecd19ccdfcbd7c01471cb02fbf1f4053cd7
- SHA512
  
  1407dc0612afd0290489086b5d252a6e055b4904d6f4ea4c0f626da6691f37823f381040757a553cdb75d70d3c8ef35845c6c7c88055f28731ac29a96effc73e
- SSDEEP
  
  12288:TLOZVQQxfnr+TK7r79/loLWeFcPRLElOM5aLc:T4VQQxfnr+TK7r79/loBF2R+OM5aLc
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2