c61850c6f3bd8569d0223a03350a83f01b4725213e6eaaabd94462a04556f202 | Triage

Sharing

General

Target

3848ace13519a1c3ff4cc37a0c88c926
Size

27KB
Sample

231231-qwth2sfhe2
MD5

3848ace13519a1c3ff4cc37a0c88c926
SHA1

16a38e534507dd50c9766f1f5d7c1648d91013e3
SHA256

c61850c6f3bd8569d0223a03350a83f01b4725213e6eaaabd94462a04556f202
SHA512

057eeab2670cd53414601f24d975a29c299212c8230d50fcb203391e73f000db4d0ef097bd73a50fe463b40b1130b07c2089b3d8315bbb026a928bf28c3bba11
SSDEEP

768:Z6hVFpyFwFwFwFwFwFwFwF6oZo1zt7/RmK:ZaKUo4

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  3848ace13519a1c3ff4cc37a0c88c926
- Size
  
  27KB
- MD5
  
  3848ace13519a1c3ff4cc37a0c88c926
- SHA1
  
  16a38e534507dd50c9766f1f5d7c1648d91013e3
- SHA256
  
  c61850c6f3bd8569d0223a03350a83f01b4725213e6eaaabd94462a04556f202
- SHA512
  
  057eeab2670cd53414601f24d975a29c299212c8230d50fcb203391e73f000db4d0ef097bd73a50fe463b40b1130b07c2089b3d8315bbb026a928bf28c3bba11
- SSDEEP
  
  768:Z6hVFpyFwFwFwFwFwFwFwF6oZo1zt7/RmK:ZaKUo4
Score

8^/10

persistence
- Drops file in Drivers directory
- Modifies Shared Task Scheduler registry keys
  persistence
- Loads dropped DLL
- Registers COM server for autorun
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2