527a1fd4b178939a30886cebd0425eb552a993945a7f3c8271d82ba6214c8d4d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a730d324d7051837d14b6ff925b1e965fc01140
Size

19KB
Sample

230202-qvx5vahd97
MD5

6e3af9ea14aeb4cf382f3ee84f755e4b
SHA1

8a730d324d7051837d14b6ff925b1e965fc01140
SHA256

527a1fd4b178939a30886cebd0425eb552a993945a7f3c8271d82ba6214c8d4d
SHA512

d311b9dc3dffe2d1289b00d3fc7daee1d85171e042c8e71d44b5c0061dd65d422cdb6707a9f88dc6f559521d5890b7341826833b44e900e280a91f155fdeab8a
SSDEEP

384:VKtctIvzbVyT6yvhMO9sLIiO74wGV+FUWXsRsoPf1TrVp8a80wk7S:VdIvzbV0VvassLIiOzu+FUM8ZLp8a80e

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  8a730d324d7051837d14b6ff925b1e965fc01140
- Size
  
  19KB
- MD5
  
  6e3af9ea14aeb4cf382f3ee84f755e4b
- SHA1
  
  8a730d324d7051837d14b6ff925b1e965fc01140
- SHA256
  
  527a1fd4b178939a30886cebd0425eb552a993945a7f3c8271d82ba6214c8d4d
- SHA512
  
  d311b9dc3dffe2d1289b00d3fc7daee1d85171e042c8e71d44b5c0061dd65d422cdb6707a9f88dc6f559521d5890b7341826833b44e900e280a91f155fdeab8a
- SSDEEP
  
  384:VKtctIvzbVyT6yvhMO9sLIiO74wGV+FUWXsRsoPf1TrVp8a80wk7S:VdIvzbV0VvassLIiOzu+FUM8ZLp8a80e
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2