dde7f0f5c8af65514523518f228803a331472724037d33e85d93ac0102e866bf | Triage

Sharing

General

Target

dde7f0f5c8af65514523518f228803a331472724037d33e85d93ac0102e866bf
Size

256KB
Sample

221204-l2k2mshb84
MD5

ec2974801d0de4f090ec64fb471f5ffd
SHA1

48a24ac7a99dc2c0d960cd2a84bfe8ba7d378207
SHA256

dde7f0f5c8af65514523518f228803a331472724037d33e85d93ac0102e866bf
SHA512

510b740e23611c2527f8a4e9610503d751491b02ffa381bab91ff4962422b06d686c4b20640720baeec0c1555ff90c4eda1131d957528ef81df8828c02fe1c5c
SSDEEP

3072:pkGIgQKdVQJ0oZYOZI1TpZUkA6MD1JsPoidRKsuZryx:pjQKzo9YOZI3jA6ZPpjK3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  dde7f0f5c8af65514523518f228803a331472724037d33e85d93ac0102e866bf
- Size
  
  256KB
- MD5
  
  ec2974801d0de4f090ec64fb471f5ffd
- SHA1
  
  48a24ac7a99dc2c0d960cd2a84bfe8ba7d378207
- SHA256
  
  dde7f0f5c8af65514523518f228803a331472724037d33e85d93ac0102e866bf
- SHA512
  
  510b740e23611c2527f8a4e9610503d751491b02ffa381bab91ff4962422b06d686c4b20640720baeec0c1555ff90c4eda1131d957528ef81df8828c02fe1c5c
- SSDEEP
  
  3072:pkGIgQKdVQJ0oZYOZI1TpZUkA6MD1JsPoidRKsuZryx:pjQKzo9YOZI3jA6ZPpjK3
Score

7^/10

discovery
- Deletes itself
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2