General

  • Target

    518c295dd4bc20e300c2bf5fe3bd540a

  • Size

    262KB

  • Sample

    240110-zbq2vsfhdn

  • MD5

    518c295dd4bc20e300c2bf5fe3bd540a

  • SHA1

    845c6ddc19e0dad406a3cd96cb416080d196989d

  • SHA256

    aff31cff567948ba4ae2144bbcc562a4d3ab115f7e8b00482414b81ebf40a543

  • SHA512

    02ca9a41141c31a205c2f3ea4782d3135910aaa7434dd87a3d8b4866b889873aa00fe5449fea782641a74fd5edc9433303b9e4c7b8f49b0f4997ede7a41f9217

  • SSDEEP

    6144:758Gp+df0afmVTRMdwdpn94sLrNXel9ibb98+MAAD:F8YkfXf4TRME94svNuzibb9Z+

Score
7/10

Malware Config

Targets

    • Target

      518c295dd4bc20e300c2bf5fe3bd540a

    • Size

      262KB

    • MD5

      518c295dd4bc20e300c2bf5fe3bd540a

    • SHA1

      845c6ddc19e0dad406a3cd96cb416080d196989d

    • SHA256

      aff31cff567948ba4ae2144bbcc562a4d3ab115f7e8b00482414b81ebf40a543

    • SHA512

      02ca9a41141c31a205c2f3ea4782d3135910aaa7434dd87a3d8b4866b889873aa00fe5449fea782641a74fd5edc9433303b9e4c7b8f49b0f4997ede7a41f9217

    • SSDEEP

      6144:758Gp+df0afmVTRMdwdpn94sLrNXel9ibb98+MAAD:F8YkfXf4TRME94svNuzibb9Z+

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

2
T1112

Tasks