b79e6d45abf7cc26a6adb32ca196621f4faec497c31fd60842aeac6b207ce44d | Triage

Sharing

General

Target

b79e6d45abf7cc26a6adb32ca196621f4faec497c31fd60842aeac6b207ce44d
Size

135KB
Sample

221204-nvyehaae9v
MD5

0b93ace1c1901adeee8d95185c110b80
SHA1

99bb52a471c49e9f94192fa8f63b240b60803227
SHA256

b79e6d45abf7cc26a6adb32ca196621f4faec497c31fd60842aeac6b207ce44d
SHA512

c13504a605c2a65890f9c35607aa40c960b2e93191b299b23440dd2def392c70300d44055b397825b2af0fec632e08ea860b689eae05b857469823c4fdce2b71
SSDEEP

1536:l6u6YB56XJ6owvzbNfURp4VntUhtH7Vi4BhDWqbYglbUdIs:l6uB28owvlrVnihVVi4HSXWb6J

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b79e6d45abf7cc26a6adb32ca196621f4faec497c31fd60842aeac6b207ce44d
- Size
  
  135KB
- MD5
  
  0b93ace1c1901adeee8d95185c110b80
- SHA1
  
  99bb52a471c49e9f94192fa8f63b240b60803227
- SHA256
  
  b79e6d45abf7cc26a6adb32ca196621f4faec497c31fd60842aeac6b207ce44d
- SHA512
  
  c13504a605c2a65890f9c35607aa40c960b2e93191b299b23440dd2def392c70300d44055b397825b2af0fec632e08ea860b689eae05b857469823c4fdce2b71
- SSDEEP
  
  1536:l6u6YB56XJ6owvzbNfURp4VntUhtH7Vi4BhDWqbYglbUdIs:l6uB28owvlrVnihVVi4HSXWb6J
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2