d98a2b77e61c2fce385fd77b700113bd360323b2dbba887074bae8a64f65cd4c | Triage

Sharing

General

Target

NEAS.69891bbb6b2e3b4d00f9ec2323b29d20.exe
Size

90KB
Sample

231014-wj2lsabe3s
MD5

69891bbb6b2e3b4d00f9ec2323b29d20
SHA1

61ecd168bc12b9167680a0649055d1fd4bf1e4eb
SHA256

d98a2b77e61c2fce385fd77b700113bd360323b2dbba887074bae8a64f65cd4c
SHA512

5e5e9eea23e2ce3509bd14ac62edbf51462623fed2f753c1a566f74ea1aa46604434e44066e34689c05509ae45ff3d821d275687035ae24b357c11c4aece6bda
SSDEEP

1536:1I/3dd6onp5LM0OyZAdW5QzR1TK9Wzi5Wv6vDo5f65MEp0uc9igcqhBekdqf0:q+op58yOdW5QzRaWzikvyDo5f65M9ucl

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.69891bbb6b2e3b4d00f9ec2323b29d20.exe
- Size
  
  90KB
- MD5
  
  69891bbb6b2e3b4d00f9ec2323b29d20
- SHA1
  
  61ecd168bc12b9167680a0649055d1fd4bf1e4eb
- SHA256
  
  d98a2b77e61c2fce385fd77b700113bd360323b2dbba887074bae8a64f65cd4c
- SHA512
  
  5e5e9eea23e2ce3509bd14ac62edbf51462623fed2f753c1a566f74ea1aa46604434e44066e34689c05509ae45ff3d821d275687035ae24b357c11c4aece6bda
- SSDEEP
  
  1536:1I/3dd6onp5LM0OyZAdW5QzR1TK9Wzi5Wv6vDo5f65MEp0uc9igcqhBekdqf0:q+op58yOdW5QzRaWzikvyDo5f65M9ucl
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2