1d85a1aebe239805900fff869acefd7de9291e437bab9c5f3a5788114934a884 | Triage

Sharing

General

Target

1d85a1aebe239805900fff869acefd7de9291e437bab9c5f3a5788114934a884
Size

309KB
Sample

221205-s3sansga71
MD5

6747bb8cfc01f6bc61750a5a77678faa
SHA1

27f56e3c2768660e3f08581edd4f154b6c72da97
SHA256

1d85a1aebe239805900fff869acefd7de9291e437bab9c5f3a5788114934a884
SHA512

efdecfb9f65b5872d778cb189a50b8937dc24b00f3163d50b17565c3043d383a27023f19de313fe703cf7f1e6599130d5ce1592c876ff2bc66c8afa5aee53f69
SSDEEP

3072:4pU5AB+6p1mX+0XeJGuoDbAt0f2j8QwIFCtMq2Kd4PulvvGIC46qFfg+9kcmsHfN:3Up1mPuJnC2gQwRMq22lnOOV9kyN

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  1d85a1aebe239805900fff869acefd7de9291e437bab9c5f3a5788114934a884
- Size
  
  309KB
- MD5
  
  6747bb8cfc01f6bc61750a5a77678faa
- SHA1
  
  27f56e3c2768660e3f08581edd4f154b6c72da97
- SHA256
  
  1d85a1aebe239805900fff869acefd7de9291e437bab9c5f3a5788114934a884
- SHA512
  
  efdecfb9f65b5872d778cb189a50b8937dc24b00f3163d50b17565c3043d383a27023f19de313fe703cf7f1e6599130d5ce1592c876ff2bc66c8afa5aee53f69
- SSDEEP
  
  3072:4pU5AB+6p1mX+0XeJGuoDbAt0f2j8QwIFCtMq2Kd4PulvvGIC46qFfg+9kcmsHfN:3Up1mPuJnC2gQwRMq22lnOOV9kyN
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2