2ae81ede765875477ae33f32f071fa3f1e5180bc62901c0b363d802cea363c7e | Triage

Sharing

General

Target

2ae81ede765875477ae33f32f071fa3f1e5180bc62901c0b363d802cea363c7e
Size

149KB
Sample

221207-ebg4qscc97
MD5

0f17c06a04f2f27188184c259bdd6ff0
SHA1

b5e76dcc64a61d8fdad2cf92db11b3bc7d4e0f16
SHA256

2ae81ede765875477ae33f32f071fa3f1e5180bc62901c0b363d802cea363c7e
SHA512

c185cc862ebe1e851b4150483ec3a29699b89405d9b349c7dbd4a3978894e8ec586ad3e6aa2455e94cb48de4f2a8a789c149372b092564deaa6283c0757614ae
SSDEEP

3072:3Mq3qCEqUTIzWodffH/oDY/FBkyygR7Lxnf40U:8q3q9bT1oxPwEtB3t40U

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  2ae81ede765875477ae33f32f071fa3f1e5180bc62901c0b363d802cea363c7e
- Size
  
  149KB
- MD5
  
  0f17c06a04f2f27188184c259bdd6ff0
- SHA1
  
  b5e76dcc64a61d8fdad2cf92db11b3bc7d4e0f16
- SHA256
  
  2ae81ede765875477ae33f32f071fa3f1e5180bc62901c0b363d802cea363c7e
- SHA512
  
  c185cc862ebe1e851b4150483ec3a29699b89405d9b349c7dbd4a3978894e8ec586ad3e6aa2455e94cb48de4f2a8a789c149372b092564deaa6283c0757614ae
- SSDEEP
  
  3072:3Mq3qCEqUTIzWodffH/oDY/FBkyygR7Lxnf40U:8q3q9bT1oxPwEtB3t40U
Score

8^/10

persistence
- Sets DLL path for service in the registry
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2