a5449d1b6a0e239629c5fcdcba2fe0460f9978414d8a236bf60d4ed74d0d1478 | Triage

Sharing

General

Target

721ec98a0244d05d52ca4b4a71747992295f6a3e
Size

18KB
Sample

230202-qxv39shh58
MD5

0929a68c70687a5234e01415daf238b3
SHA1

721ec98a0244d05d52ca4b4a71747992295f6a3e
SHA256

a5449d1b6a0e239629c5fcdcba2fe0460f9978414d8a236bf60d4ed74d0d1478
SHA512

5500d5ba423ba6276b0b2040b9601a65e01a389553f4f774a3074041455bffe9e2818e34099ba80f3c40f85a59885664de8bf71b26b99f7ac75a731d45be2918
SSDEEP

384:xxekZJX+QgndkMqGtqxND/x6vLNqRk18Ftf:XHD9gy+t676vLNqRkitf

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  721ec98a0244d05d52ca4b4a71747992295f6a3e
- Size
  
  18KB
- MD5
  
  0929a68c70687a5234e01415daf238b3
- SHA1
  
  721ec98a0244d05d52ca4b4a71747992295f6a3e
- SHA256
  
  a5449d1b6a0e239629c5fcdcba2fe0460f9978414d8a236bf60d4ed74d0d1478
- SHA512
  
  5500d5ba423ba6276b0b2040b9601a65e01a389553f4f774a3074041455bffe9e2818e34099ba80f3c40f85a59885664de8bf71b26b99f7ac75a731d45be2918
- SSDEEP
  
  384:xxekZJX+QgndkMqGtqxND/x6vLNqRk18Ftf:XHD9gy+t676vLNqRkitf
Score

8^/10

persistence
- Drops file in Drivers directory
- Modifies AppInit DLL entries
  persistence
- Deletes itself
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2