a11069f15a71457b77b50b837764ee462534a06d4c66636c8d0b0b03b1354607 | Triage

Sharing

General

Target

a11069f15a71457b77b50b837764ee462534a06d4c66636c8d0b0b03b1354607
Size

305KB
Sample

221206-xa78msff9y
MD5

04142ca6abc9b3af9eab4bb339614c7f
SHA1

c171aaea347180e1bccc5e09b3160dbb5979a8de
SHA256

a11069f15a71457b77b50b837764ee462534a06d4c66636c8d0b0b03b1354607
SHA512

db26c61524cbc0c689e21f62c30e661d6f8ab344e0fd4e7a914059cbd81bc0541f75d4264469219f509c9687f6fae797c3e901da13f076d23f454a086f8b3143
SSDEEP

6144:kFDPnPsHhC6TSADEG3xErj4dJ/SuKpTRxCu1L3qRtjqwawe+oBSdr:APnPuTNDPOj4dBPKpTRH1TqRtjqvD+oB

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  a11069f15a71457b77b50b837764ee462534a06d4c66636c8d0b0b03b1354607
- Size
  
  305KB
- MD5
  
  04142ca6abc9b3af9eab4bb339614c7f
- SHA1
  
  c171aaea347180e1bccc5e09b3160dbb5979a8de
- SHA256
  
  a11069f15a71457b77b50b837764ee462534a06d4c66636c8d0b0b03b1354607
- SHA512
  
  db26c61524cbc0c689e21f62c30e661d6f8ab344e0fd4e7a914059cbd81bc0541f75d4264469219f509c9687f6fae797c3e901da13f076d23f454a086f8b3143
- SSDEEP
  
  6144:kFDPnPsHhC6TSADEG3xErj4dJ/SuKpTRxCu1L3qRtjqwawe+oBSdr:APnPuTNDPOj4dBPKpTRH1TqRtjqvD+oB
Score

8^/10

persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2