dc1d9b9744e242e016c56caa777b63accf1ee578138d94b13c778e61b8aab0a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc1d9b9744e242e016c56caa777b63accf1ee578138d94b13c778e61b8aab0a2
Size

96KB
Sample

221204-rr6hgsgb85
MD5

818cdc4af7774a268e2535bdf7214871
SHA1

1f440af20ae6a979ec35c436be679eab5010d49c
SHA256

dc1d9b9744e242e016c56caa777b63accf1ee578138d94b13c778e61b8aab0a2
SHA512

bebd77342aabd42b8230b2d27d02e400d54dd040119a050aa2c226697bc677f00daefe2274bcddba78d5bfc1ca3b4af05bca0ad6cb9408a747615b1c03eda085
SSDEEP

1536:AU1pQn8Nzyy21wH0f/SriqzV3fUTAHKCpxh667wcP6d9T0Go4GJlIU:AU1yGkwMmV3wCFr77Pm9AGo4GJlIU

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  dc1d9b9744e242e016c56caa777b63accf1ee578138d94b13c778e61b8aab0a2
- Size
  
  96KB
- MD5
  
  818cdc4af7774a268e2535bdf7214871
- SHA1
  
  1f440af20ae6a979ec35c436be679eab5010d49c
- SHA256
  
  dc1d9b9744e242e016c56caa777b63accf1ee578138d94b13c778e61b8aab0a2
- SHA512
  
  bebd77342aabd42b8230b2d27d02e400d54dd040119a050aa2c226697bc677f00daefe2274bcddba78d5bfc1ca3b4af05bca0ad6cb9408a747615b1c03eda085
- SSDEEP
  
  1536:AU1pQn8Nzyy21wH0f/SriqzV3fUTAHKCpxh667wcP6d9T0Go4GJlIU:AU1yGkwMmV3wCFr77Pm9AGo4GJlIU
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2