b53ea94ec4269c0a45f87238e674a7ec96891c1ece6293a39c7daeb2bc198e46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b53ea94ec4269c0a45f87238e674a7ec96891c1ece6293a39c7daeb2bc198e46
Size

105KB
Sample

221206-t5hppahb51
MD5

6eb399013bf58679dcbfb3c184509213
SHA1

18bd15efa52dbb99c7a7e997e36667d87c0caa48
SHA256

b53ea94ec4269c0a45f87238e674a7ec96891c1ece6293a39c7daeb2bc198e46
SHA512

3f45bab85413b733ecba45617bdf392b6f6e0cf028f285fce8c28317069ee60fdbde39e345851fa3350c14dbcf4b92326b950aaaf52c49f205a3c989ffb12566
SSDEEP

1536:EyqrQrFUH+HtWXiaAkc//////4KCCai/iZ72rHp/pOiqms1zLaqOiQMaz/iE0f:SqOHjyAc//////jCCLi+Jz1GaqdZazjg

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  b53ea94ec4269c0a45f87238e674a7ec96891c1ece6293a39c7daeb2bc198e46
- Size
  
  105KB
- MD5
  
  6eb399013bf58679dcbfb3c184509213
- SHA1
  
  18bd15efa52dbb99c7a7e997e36667d87c0caa48
- SHA256
  
  b53ea94ec4269c0a45f87238e674a7ec96891c1ece6293a39c7daeb2bc198e46
- SHA512
  
  3f45bab85413b733ecba45617bdf392b6f6e0cf028f285fce8c28317069ee60fdbde39e345851fa3350c14dbcf4b92326b950aaaf52c49f205a3c989ffb12566
- SSDEEP
  
  1536:EyqrQrFUH+HtWXiaAkc//////4KCCai/iZ72rHp/pOiqms1zLaqOiQMaz/iE0f:SqOHjyAc//////jCCLi+Jz1GaqdZazjg
Score

8^/10

persistence
- Executes dropped EXE
- Modifies Installed Components in the registry
  persistence
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2