bd54e2f58fb6f312956d20aa21e549f3cdb2caa6487cb912b98b097ae6d31f68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd54e2f58fb6f312956d20aa21e549f3cdb2caa6487cb912b98b097ae6d31f68
Size

77KB
Sample

221205-h66blace3y
MD5

25e1c7fb14a4fea8e1a85a7948c25172
SHA1

30a3079cc169501a128344a0d42353da9dab9537
SHA256

bd54e2f58fb6f312956d20aa21e549f3cdb2caa6487cb912b98b097ae6d31f68
SHA512

40f9ff695588a9a45f1ce3411fc442ac015f39708ea24531ccced05facf09d02bba2f80f2f94b6a8b3656a3bfa5ffdf19f83ac9ca0ecc7feea3c29706c007877
SSDEEP

1536:Z1UOVvncRIzQnX+Nqn/V9xKqf0mSZXjcY8it2uvWcu3QUkjGkGDoz:rNnc6Ly30qf0/ZX44t2uvWcuyjSDoz

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  bd54e2f58fb6f312956d20aa21e549f3cdb2caa6487cb912b98b097ae6d31f68
- Size
  
  77KB
- MD5
  
  25e1c7fb14a4fea8e1a85a7948c25172
- SHA1
  
  30a3079cc169501a128344a0d42353da9dab9537
- SHA256
  
  bd54e2f58fb6f312956d20aa21e549f3cdb2caa6487cb912b98b097ae6d31f68
- SHA512
  
  40f9ff695588a9a45f1ce3411fc442ac015f39708ea24531ccced05facf09d02bba2f80f2f94b6a8b3656a3bfa5ffdf19f83ac9ca0ecc7feea3c29706c007877
- SSDEEP
  
  1536:Z1UOVvncRIzQnX+Nqn/V9xKqf0mSZXjcY8it2uvWcu3QUkjGkGDoz:rNnc6Ly30qf0/ZX44t2uvWcuyjSDoz
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2