7e72aa95cfd1e51971fe7dc266693fa3403c71682ac7f12050dd8b267896b58e | Triage

Sharing

General

Target

Ziraat Bankasi Swift Mesaji.exe
Size

232KB
Sample

230130-yktzface34
MD5

870d318ce09ad11e7a967f572bcd5c62
SHA1

841d4a1fadfd136a6f30ba15d0f7317a68fe732d
SHA256

7e72aa95cfd1e51971fe7dc266693fa3403c71682ac7f12050dd8b267896b58e
SHA512

c6260fa76d20280f8cb4583698759e79db4122b99e32e1a6d8b1e176331a916e72b9e92565b63869711faa4ac72c9a488b7e8e3847f89e9c515e9d4eef06763e
SSDEEP

3072:9030XCIscLlj+cPiaoFF/boyyDfdTU7Jz9d5upfGuNwu5CnGZW1HK1eezLubjlEq:9jFoDTQfJ+zhupfpwuUGZkKV6juIB

Score

7^/10

Malware Config

Targets

- Target
  
  Ziraat Bankasi Swift Mesaji.exe
- Size
  
  232KB
- MD5
  
  870d318ce09ad11e7a967f572bcd5c62
- SHA1
  
  841d4a1fadfd136a6f30ba15d0f7317a68fe732d
- SHA256
  
  7e72aa95cfd1e51971fe7dc266693fa3403c71682ac7f12050dd8b267896b58e
- SHA512
  
  c6260fa76d20280f8cb4583698759e79db4122b99e32e1a6d8b1e176331a916e72b9e92565b63869711faa4ac72c9a488b7e8e3847f89e9c515e9d4eef06763e
- SSDEEP
  
  3072:9030XCIscLlj+cPiaoFF/boyyDfdTU7Jz9d5upfGuNwu5CnGZW1HK1eezLubjlEq:9jFoDTQfJ+zhupfpwuUGZkKV6juIB
Score

7^/10
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2