5c063db1ef8543cd5980c62f695a30b15964ba66d9aa2d1c4432eba4716e3147 | Triage

Sharing

General

Target

5c063db1ef8543cd5980c62f695a30b15964ba66d9aa2d1c4432eba4716e3147
Size

736KB
Sample

230303-m22j3ahb65
MD5

ff2094fd7c2a1a0c184043125709153c
SHA1

124b5fc18c34e4a8eaa980cab55f0be2c133ce79
SHA256

5c063db1ef8543cd5980c62f695a30b15964ba66d9aa2d1c4432eba4716e3147
SHA512

9c930adb19192793612d0ad5e6fdde4055926e2f40b07cc800f1ae4158cac95287e2f5c304f5f42ee926e47ccb97c5afa1d4e348e8e609fc4790fe49c2034381
SSDEEP

12288:VuldXWz7yXxbSBudVOxpdDvi/wdFC4cs06jvCso7ZF9V6p:VuldXWz7yXxGBWVcpd2odo4T0SKsEF9K

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  5c063db1ef8543cd5980c62f695a30b15964ba66d9aa2d1c4432eba4716e3147
- Size
  
  736KB
- MD5
  
  ff2094fd7c2a1a0c184043125709153c
- SHA1
  
  124b5fc18c34e4a8eaa980cab55f0be2c133ce79
- SHA256
  
  5c063db1ef8543cd5980c62f695a30b15964ba66d9aa2d1c4432eba4716e3147
- SHA512
  
  9c930adb19192793612d0ad5e6fdde4055926e2f40b07cc800f1ae4158cac95287e2f5c304f5f42ee926e47ccb97c5afa1d4e348e8e609fc4790fe49c2034381
- SSDEEP
  
  12288:VuldXWz7yXxbSBudVOxpdDvi/wdFC4cs06jvCso7ZF9V6p:VuldXWz7yXxGBWVcpd2odo4T0SKsEF9K
Score

8^/10

persistence
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2