b1bdc971748993cf9bf1eff0f7cb84a861f210860dae9e410ea6415d682fd163 | Triage

Sharing

General

Target

b1bdc971748993cf9bf1eff0f7cb84a861f210860dae9e410ea6415d682fd163
Size

40KB
Sample

221206-r7m13sgc83
MD5

284544366f023967365a14bd7847ec52
SHA1

0728665c3f59c26e324c069a35e33f457c28ed58
SHA256

b1bdc971748993cf9bf1eff0f7cb84a861f210860dae9e410ea6415d682fd163
SHA512

50621da652f261ee80a292381105f31a01e285649a079e0fb600256a48f607b13e75112be038cf8cc045f686b96aa95f1392e25458034a127bb90d8b2dff9f01
SSDEEP

768:288hudAB4haLbYswxYxbsxI6NGxtjF3l0js:2/aaLcFx6bsxI6M/hl

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b1bdc971748993cf9bf1eff0f7cb84a861f210860dae9e410ea6415d682fd163
- Size
  
  40KB
- MD5
  
  284544366f023967365a14bd7847ec52
- SHA1
  
  0728665c3f59c26e324c069a35e33f457c28ed58
- SHA256
  
  b1bdc971748993cf9bf1eff0f7cb84a861f210860dae9e410ea6415d682fd163
- SHA512
  
  50621da652f261ee80a292381105f31a01e285649a079e0fb600256a48f607b13e75112be038cf8cc045f686b96aa95f1392e25458034a127bb90d8b2dff9f01
- SSDEEP
  
  768:288hudAB4haLbYswxYxbsxI6NGxtjF3l0js:2/aaLcFx6bsxI6M/hl
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2