9bf0bb4e719b57ed5a9f4cc9452160c3c5892e3f2d5d5be46a43f9d4051406c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bf0bb4e719b57ed5a9f4cc9452160c3c5892e3f2d5d5be46a43f9d4051406c7
Size

88KB
Sample

221205-nbtl7sde57
MD5

c400cd192343835084d91a4cfa1d3ab1
SHA1

a113d637de9f3532284f311357bc4911d77dab70
SHA256

9bf0bb4e719b57ed5a9f4cc9452160c3c5892e3f2d5d5be46a43f9d4051406c7
SHA512

c3f051ed9f99962bc0cc188a72f71eaf47d94de4011c295329eec5372a08daf626bb4bb9d76031f892ad0d64192ce35df0b1039c2f78611045ca55ab3a9a554c
SSDEEP

1536:qGwqsA/NJyUUS2MTffXlg7s/7Kc+qUQwlp4vFqdt2ofJlIU:qfq/jwsT1goe4w34u2ofJlIU

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  9bf0bb4e719b57ed5a9f4cc9452160c3c5892e3f2d5d5be46a43f9d4051406c7
- Size
  
  88KB
- MD5
  
  c400cd192343835084d91a4cfa1d3ab1
- SHA1
  
  a113d637de9f3532284f311357bc4911d77dab70
- SHA256
  
  9bf0bb4e719b57ed5a9f4cc9452160c3c5892e3f2d5d5be46a43f9d4051406c7
- SHA512
  
  c3f051ed9f99962bc0cc188a72f71eaf47d94de4011c295329eec5372a08daf626bb4bb9d76031f892ad0d64192ce35df0b1039c2f78611045ca55ab3a9a554c
- SSDEEP
  
  1536:qGwqsA/NJyUUS2MTffXlg7s/7Kc+qUQwlp4vFqdt2ofJlIU:qfq/jwsT1goe4w34u2ofJlIU
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2