1028c5b6b0f137c2440d81b1b1896e5cac83c28ab726bfd4e9fbe777264b208f | Triage

Sharing

General

Target

1028c5b6b0f137c2440d81b1b1896e5cac83c28ab726bfd4e9fbe777264b208f
Size

4.7MB
Sample

230518-qy5n4aab2z
MD5

e3e79c736912a275997270bded1585a6
SHA1

13f3da6dfdd80a55a1e9c4f8aded690a3ae63431
SHA256

1028c5b6b0f137c2440d81b1b1896e5cac83c28ab726bfd4e9fbe777264b208f
SHA512

ec30dc8aed7cf97be0021a4f256da188f135ba077233d985f96dc0ca43ca34fa5233b84e61acaea30e6ce883863b9050c1b8e5f7a5c77469672cbb7b6b1b7187
SSDEEP

49152:WINaXXB60NmpJrYb0GXRBaQUVgOU5BsUY2CDX6WtD5nzQpy5HEFMUA:qBZ2r/2aiMki

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  1028c5b6b0f137c2440d81b1b1896e5cac83c28ab726bfd4e9fbe777264b208f
- Size
  
  4.7MB
- MD5
  
  e3e79c736912a275997270bded1585a6
- SHA1
  
  13f3da6dfdd80a55a1e9c4f8aded690a3ae63431
- SHA256
  
  1028c5b6b0f137c2440d81b1b1896e5cac83c28ab726bfd4e9fbe777264b208f
- SHA512
  
  ec30dc8aed7cf97be0021a4f256da188f135ba077233d985f96dc0ca43ca34fa5233b84e61acaea30e6ce883863b9050c1b8e5f7a5c77469672cbb7b6b1b7187
- SSDEEP
  
  49152:WINaXXB60NmpJrYb0GXRBaQUVgOU5BsUY2CDX6WtD5nzQpy5HEFMUA:qBZ2r/2aiMki
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2