gh0strat | 56a9db544dc3df1ceaa05d1dc3e51262e42a854b447016ce0b39e3a339f6ac5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56a9db544dc3df1ceaa05d1dc3e51262e42a854b447016ce0b39e3a339f6ac5c
Size

202KB
Sample

221205-rrp6hacc3y
MD5

2ba013d08116985438bdd915d6e6f7d0
SHA1

ea74fd79e43a5837f7bb1080cc425dc9e4e81a15
SHA256

56a9db544dc3df1ceaa05d1dc3e51262e42a854b447016ce0b39e3a339f6ac5c
SHA512

6328b6a75695d45b3676faef499614bb44efa49353b894c7253ca902157db5362817cd3215010d481550e92119b2d9389644ad16cd443bb840c7613f931fe8cf
SSDEEP

3072:ugxxClZbgMiXyxezdcNj12JIHd7ht0ukLFyBkIA9WuqqDbyWTBftCCzNt8Z:uEDMVQfJQtV0RIkWuqqDuWTBlCi8Z

Score

10^/10

gh0strat persistence

Malware Config

Targets

- Target
  
  56a9db544dc3df1ceaa05d1dc3e51262e42a854b447016ce0b39e3a339f6ac5c
- Size
  
  202KB
- MD5
  
  2ba013d08116985438bdd915d6e6f7d0
- SHA1
  
  ea74fd79e43a5837f7bb1080cc425dc9e4e81a15
- SHA256
  
  56a9db544dc3df1ceaa05d1dc3e51262e42a854b447016ce0b39e3a339f6ac5c
- SHA512
  
  6328b6a75695d45b3676faef499614bb44efa49353b894c7253ca902157db5362817cd3215010d481550e92119b2d9389644ad16cd443bb840c7613f931fe8cf
- SSDEEP
  
  3072:ugxxClZbgMiXyxezdcNj12JIHd7ht0ukLFyBkIA9WuqqDbyWTBftCCzNt8Z:uEDMVQfJQtV0RIkWuqqDuWTBlCi8Z
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2