95035d8fbf370a0be78e15bc3135f34cbe17da4136b91c76c295fbfa1ff084d3 | Triage

Sharing

General

Target

95035d8fbf370a0be78e15bc3135f34cbe17da4136b91c76c295fbfa1ff084d3
Size

305KB
Sample

221205-n9b5tagg58
MD5

d07b7345a376a3e1a251986a76bd9b8a
SHA1

422d37f129b3da8dbb655d09bd2c40834477b91c
SHA256

95035d8fbf370a0be78e15bc3135f34cbe17da4136b91c76c295fbfa1ff084d3
SHA512

a2bfcb29f753863830107f94ef80167feb7335472ef3ebc8e68f352537fcd9865505f42572b2baa5a75eca998710eb5ee5739028237efc613cdfbfd4a1ff47b4
SSDEEP

6144:ZjEba8FX0qrL8DeyOxBhwE36qIG/VtvvrLz+qBWbT2CQR:Roa85t38Dey2pbj/bvvrLzBWPzQ

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  95035d8fbf370a0be78e15bc3135f34cbe17da4136b91c76c295fbfa1ff084d3
- Size
  
  305KB
- MD5
  
  d07b7345a376a3e1a251986a76bd9b8a
- SHA1
  
  422d37f129b3da8dbb655d09bd2c40834477b91c
- SHA256
  
  95035d8fbf370a0be78e15bc3135f34cbe17da4136b91c76c295fbfa1ff084d3
- SHA512
  
  a2bfcb29f753863830107f94ef80167feb7335472ef3ebc8e68f352537fcd9865505f42572b2baa5a75eca998710eb5ee5739028237efc613cdfbfd4a1ff47b4
- SSDEEP
  
  6144:ZjEba8FX0qrL8DeyOxBhwE36qIG/VtvvrLz+qBWbT2CQR:Roa85t38Dey2pbj/bvvrLzBWPzQ
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2