General

  • Target

    779156930f35c787b6db9d4a3c33cc05

  • Size

    293KB

  • Sample

    240126-rgd1gsfde8

  • MD5

    779156930f35c787b6db9d4a3c33cc05

  • SHA1

    171214c93c3fbe11e06480588bd38ef4f5b67981

  • SHA256

    66c7f9516e0f564e90ac8fa9c783bc29c3a57bd98d76bae797945ee4a4495d71

  • SHA512

    65bb46caa2607fc6703a1614227a804aef6749bdaa3b58a379615e971b3f47f4c9cc177c1536498ccc7a1e0d824048c8818c73b4f393dfca1b4b97aeab3f0e8c

  • SSDEEP

    6144:EPdMyMANEVzGlcEDUl4qaRYVQ+CJTGbusJRhgnGXcjD7Xm2BeddhMHpmMDr:mNEh8cSLqdtCsisDhgnGABBedDMJmMX

Score
7/10

Malware Config

Targets

    • Target

      779156930f35c787b6db9d4a3c33cc05

    • Size

      293KB

    • MD5

      779156930f35c787b6db9d4a3c33cc05

    • SHA1

      171214c93c3fbe11e06480588bd38ef4f5b67981

    • SHA256

      66c7f9516e0f564e90ac8fa9c783bc29c3a57bd98d76bae797945ee4a4495d71

    • SHA512

      65bb46caa2607fc6703a1614227a804aef6749bdaa3b58a379615e971b3f47f4c9cc177c1536498ccc7a1e0d824048c8818c73b4f393dfca1b4b97aeab3f0e8c

    • SSDEEP

      6144:EPdMyMANEVzGlcEDUl4qaRYVQ+CJTGbusJRhgnGXcjD7Xm2BeddhMHpmMDr:mNEh8cSLqdtCsisDhgnGABBedDMJmMX

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

2
T1112

Tasks