48bf417be0658182f6f8d5b4e048d536e8bbc44e48e22d56ccb3436971fb0ca9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48bf417be0658182f6f8d5b4e048d536e8bbc44e48e22d56ccb3436971fb0ca9
Size

315KB
Sample

231122-jypjjsba97
MD5

9f1d281cc0f219ab29af9ea0821f6bd5
SHA1

de516764121bbbb80b142078bb51e70a3414e03f
SHA256

48bf417be0658182f6f8d5b4e048d536e8bbc44e48e22d56ccb3436971fb0ca9
SHA512

dc2cfc6f26f20250ab6b7926d2ec96bc28728a3244c9976eeccc9e4ae2d144c17036039e61f929587914aaa355118c08ae19d412d59af4c35431b9fbda855099
SSDEEP

3072:VL+xHkgOYjHi1MB3oOjKF1uHexCfe4z67JJxCfe4z67J1o795k6NNQm3y9g/gHa:pOcuHvcec1oh5k6NNQmi9g/

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  48bf417be0658182f6f8d5b4e048d536e8bbc44e48e22d56ccb3436971fb0ca9
- Size
  
  315KB
- MD5
  
  9f1d281cc0f219ab29af9ea0821f6bd5
- SHA1
  
  de516764121bbbb80b142078bb51e70a3414e03f
- SHA256
  
  48bf417be0658182f6f8d5b4e048d536e8bbc44e48e22d56ccb3436971fb0ca9
- SHA512
  
  dc2cfc6f26f20250ab6b7926d2ec96bc28728a3244c9976eeccc9e4ae2d144c17036039e61f929587914aaa355118c08ae19d412d59af4c35431b9fbda855099
- SSDEEP
  
  3072:VL+xHkgOYjHi1MB3oOjKF1uHexCfe4z67JJxCfe4z67J1o795k6NNQm3y9g/gHa:pOcuHvcec1oh5k6NNQmi9g/
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2