da66cbb86dc920edbc800ad578b84e36a92b577c7d073cbde9d2fb7570932b2d | Triage

Sharing

General

Target

da66cbb86dc920edbc800ad578b84e36a92b577c7d073cbde9d2fb7570932b2d
Size

72KB
Sample

221204-e9q5asgb75
MD5

cb8ce1297b1d95435bcfaaeaf798d203
SHA1

852cba9c7e0f5cd8633412c7043212d601c3d18f
SHA256

da66cbb86dc920edbc800ad578b84e36a92b577c7d073cbde9d2fb7570932b2d
SHA512

2179e40f627815e4ce5ea1e3adaa07a998c731b9630dc00ff6c403323773e61b90307047e6b6d73f7bf8d89c9862fd548e463d7a07df02af82fee80967f966e7
SSDEEP

1536:j/FM/w2WSUs3cLSguDJsbhF5UDMZOTGkv/HFW3jJvdMxWSA:j/FMhAHijTGkHINdMZA

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  da66cbb86dc920edbc800ad578b84e36a92b577c7d073cbde9d2fb7570932b2d
- Size
  
  72KB
- MD5
  
  cb8ce1297b1d95435bcfaaeaf798d203
- SHA1
  
  852cba9c7e0f5cd8633412c7043212d601c3d18f
- SHA256
  
  da66cbb86dc920edbc800ad578b84e36a92b577c7d073cbde9d2fb7570932b2d
- SHA512
  
  2179e40f627815e4ce5ea1e3adaa07a998c731b9630dc00ff6c403323773e61b90307047e6b6d73f7bf8d89c9862fd548e463d7a07df02af82fee80967f966e7
- SSDEEP
  
  1536:j/FM/w2WSUs3cLSguDJsbhF5UDMZOTGkv/HFW3jJvdMxWSA:j/FMhAHijTGkHINdMZA
Score

8^/10

persistence
- Sets DLL path for service in the registry
  persistence
- Deletes itself
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2