a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe
Size

312KB
Sample

230526-lrqt5seh46
MD5

3c1228d714eeda8f94ebbcdb1d75a284
SHA1

1728dfe3e2378b6c88e859e6af79c32b612aefc6
SHA256

a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215
SHA512

b3b6e81b9588fbbf42a96e4ce71e7428b52dd9b59a01ac934e63f1bce309609f507ae6f827c776a3eedc0afe45521466c4ddb76b851476fc774c8e3edcf713e4
SSDEEP

6144:eaXnROjLTs0Yb+AjEk+9x94SsWLkBPR3T7IrRAFoFc3WUk:1hOjXjY9tKxu3WwPRj0eoFc3WR

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215.exe
- Size
  
  312KB
- MD5
  
  3c1228d714eeda8f94ebbcdb1d75a284
- SHA1
  
  1728dfe3e2378b6c88e859e6af79c32b612aefc6
- SHA256
  
  a380617cf945ca35dbbc3d031bcc612f0dca96c1027a75003182ba5be2851215
- SHA512
  
  b3b6e81b9588fbbf42a96e4ce71e7428b52dd9b59a01ac934e63f1bce309609f507ae6f827c776a3eedc0afe45521466c4ddb76b851476fc774c8e3edcf713e4
- SSDEEP
  
  6144:eaXnROjLTs0Yb+AjEk+9x94SsWLkBPR3T7IrRAFoFc3WUk:1hOjXjY9tKxu3WwPRj0eoFc3WR
Score

7^/10

persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2