afe6ede4045fa6f48a536131f83658f48f647c3b23cfa1c679f45039bf032481 | Triage

Sharing

General

Target

afe6ede4045fa6f48a536131f83658f48f647c3b23cfa1c679f45039bf032481
Size

361KB
Sample

221205-yxjn8scb63
MD5

5cc8d64efd9cd603559d26c6f58bbb4a
SHA1

a4426b98175fa378ba7565d57c7444e154189da6
SHA256

afe6ede4045fa6f48a536131f83658f48f647c3b23cfa1c679f45039bf032481
SHA512

48b46e943315f831022f3f4b741291faec219b66d7858ee67f27112e414ce6adbd815a857287ca9cf28cd461fd1195edcae742ac45cfa913ee42674f22f330bd
SSDEEP

6144:EflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:EflfAsiVGjSGecvX

Score

10^/10

Malware Config

Targets

- Target
  
  afe6ede4045fa6f48a536131f83658f48f647c3b23cfa1c679f45039bf032481
- Size
  
  361KB
- MD5
  
  5cc8d64efd9cd603559d26c6f58bbb4a
- SHA1
  
  a4426b98175fa378ba7565d57c7444e154189da6
- SHA256
  
  afe6ede4045fa6f48a536131f83658f48f647c3b23cfa1c679f45039bf032481
- SHA512
  
  48b46e943315f831022f3f4b741291faec219b66d7858ee67f27112e414ce6adbd815a857287ca9cf28cd461fd1195edcae742ac45cfa913ee42674f22f330bd
- SSDEEP
  
  6144:EflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:EflfAsiVGjSGecvX
Score

10^/10
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2