73d0fe702dd8247f22bc3dd90e16bc5f63184d4f4a40f6e27ed51c90cd788210 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

774969016d238e1c31940d610b0f051c
Size

120KB
Sample

240126-n18seseddj
MD5

774969016d238e1c31940d610b0f051c
SHA1

f01b1fc0995c9924b258deac369bbae1199f9dbe
SHA256

73d0fe702dd8247f22bc3dd90e16bc5f63184d4f4a40f6e27ed51c90cd788210
SHA512

e77d97dd73f6a1e81d74e31022704041366bd5247cfafe75a6c89500a278ca2a0225bdde523011ad6b1818a57d2737cc60457d77d58edfc83e8b293e90449e75
SSDEEP

1536:NIdcFLZp0dsrYgdRAgH0/m38wIJVOy2JDVhCK8:NIdcFLEdskgrt05bnwhVh6

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  774969016d238e1c31940d610b0f051c
- Size
  
  120KB
- MD5
  
  774969016d238e1c31940d610b0f051c
- SHA1
  
  f01b1fc0995c9924b258deac369bbae1199f9dbe
- SHA256
  
  73d0fe702dd8247f22bc3dd90e16bc5f63184d4f4a40f6e27ed51c90cd788210
- SHA512
  
  e77d97dd73f6a1e81d74e31022704041366bd5247cfafe75a6c89500a278ca2a0225bdde523011ad6b1818a57d2737cc60457d77d58edfc83e8b293e90449e75
- SSDEEP
  
  1536:NIdcFLZp0dsrYgdRAgH0/m38wIJVOy2JDVhCK8:NIdcFLEdskgrt05bnwhVh6
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2