bf80cbe4f12d9b125de33afa5cc33047a4e00aa43c8118dc313f3459cba9a541 | Triage

Sharing

General

Target

bf80cbe4f12d9b125de33afa5cc33047a4e00aa43c8118dc313f3459cba9a541
Size

61KB
Sample

221205-gtht4acb59
MD5

31d4376ab726f58d506c63e6ce77d286
SHA1

43f727f2ee8f93b0bd2ba798eccbfaa27f0f50f9
SHA256

bf80cbe4f12d9b125de33afa5cc33047a4e00aa43c8118dc313f3459cba9a541
SHA512

479b294de10ec323a760ccb3824a6c16daff794b620d403d83369e531156b5ebf8abc9b3e6e15be2ae3643a06fb0b50e10ef63be6b92e364cf492fd1fc8dc2aa
SSDEEP

1536:VpOh4jWOmu3ILwI75HrINHyHut4Fx6ROYgI+Zux+cIXgjnis:br/1E575Hsht4FxCTuuxSinR

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  bf80cbe4f12d9b125de33afa5cc33047a4e00aa43c8118dc313f3459cba9a541
- Size
  
  61KB
- MD5
  
  31d4376ab726f58d506c63e6ce77d286
- SHA1
  
  43f727f2ee8f93b0bd2ba798eccbfaa27f0f50f9
- SHA256
  
  bf80cbe4f12d9b125de33afa5cc33047a4e00aa43c8118dc313f3459cba9a541
- SHA512
  
  479b294de10ec323a760ccb3824a6c16daff794b620d403d83369e531156b5ebf8abc9b3e6e15be2ae3643a06fb0b50e10ef63be6b92e364cf492fd1fc8dc2aa
- SSDEEP
  
  1536:VpOh4jWOmu3ILwI75HrINHyHut4Fx6ROYgI+Zux+cIXgjnis:br/1E575Hsht4FxCTuuxSinR
Score

8^/10

persistence
- Drops file in Drivers directory
- Sets DLL path for service in the registry
  persistence
- Deletes itself
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2