ba9ab41442d061eb787066fb77b0f1613657a3a73f2c50aaab06dfd1532213a8 | Triage

Sharing

General

Target

05048a6799be8ea6da0e2f65c37807ec
Size

244KB
Sample

231225-e1l4zsghb9
MD5

05048a6799be8ea6da0e2f65c37807ec
SHA1

6cf614dbea69f4d1721796c57d2de77a5ddd17ba
SHA256

ba9ab41442d061eb787066fb77b0f1613657a3a73f2c50aaab06dfd1532213a8
SHA512

17d8b63bd0c2cd323fc73697c38239a14f8c4e2374793cce4366b89c7544370ec78e360ce34f332a3220c62feb8c0e357a3a452c50a793cde91a0562fdfdb204
SSDEEP

1536:DLK4+34uWqT44JMA4G5bZ3aMSZZ8cOxH/K1M/KL3BAi2TjJlJ/UfFOz9g5wyV7Jl:D3+bTVJHP3QZCs2lbJWwyhJdhAzdi

Score

7^/10

javascript pdf persistence

Malware Config

Targets

- Target
  
  05048a6799be8ea6da0e2f65c37807ec
- Size
  
  244KB
- MD5
  
  05048a6799be8ea6da0e2f65c37807ec
- SHA1
  
  6cf614dbea69f4d1721796c57d2de77a5ddd17ba
- SHA256
  
  ba9ab41442d061eb787066fb77b0f1613657a3a73f2c50aaab06dfd1532213a8
- SHA512
  
  17d8b63bd0c2cd323fc73697c38239a14f8c4e2374793cce4366b89c7544370ec78e360ce34f332a3220c62feb8c0e357a3a452c50a793cde91a0562fdfdb204
- SSDEEP
  
  1536:DLK4+34uWqT44JMA4G5bZ3aMSZZ8cOxH/K1M/KL3BAi2TjJlJ/UfFOz9g5wyV7Jl:D3+bTVJHP3QZCs2lbJWwyhJdhAzdi
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2