a32e621df969ed94c91e888f53fc9c4a9bb93c802ac2fb8e782b53172e389f90 | Triage

Sharing

General

Target

ae3534a36b80e85fb8f6b575c39fabc6
Size

323KB
Sample

240229-lrtk2ade82
MD5

ae3534a36b80e85fb8f6b575c39fabc6
SHA1

73943411f7920c51d959bf53c0505ce3c6bfacbe
SHA256

a32e621df969ed94c91e888f53fc9c4a9bb93c802ac2fb8e782b53172e389f90
SHA512

292c74cdd4c731976e0245ad56f80f481574ec904d94d8b0e01c4a95040c6bdbcfa0442cee7db77eec26be9815b4780943bac083458bdd53a96e2e0dde502d95
SSDEEP

3072:lB8Nu8xX7OJ7GVlTWAt9gMNNy9sEeR7Kw1lmGSKM4hMpCCgCCcxXbsPC35ynqoRi:v8Nu8QJCVTmGtn2tpCVMflokFnuKL

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  ae3534a36b80e85fb8f6b575c39fabc6
- Size
  
  323KB
- MD5
  
  ae3534a36b80e85fb8f6b575c39fabc6
- SHA1
  
  73943411f7920c51d959bf53c0505ce3c6bfacbe
- SHA256
  
  a32e621df969ed94c91e888f53fc9c4a9bb93c802ac2fb8e782b53172e389f90
- SHA512
  
  292c74cdd4c731976e0245ad56f80f481574ec904d94d8b0e01c4a95040c6bdbcfa0442cee7db77eec26be9815b4780943bac083458bdd53a96e2e0dde502d95
- SSDEEP
  
  3072:lB8Nu8xX7OJ7GVlTWAt9gMNNy9sEeR7Kw1lmGSKM4hMpCCgCCcxXbsPC35ynqoRi:v8Nu8QJCVTmGtn2tpCVMflokFnuKL
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2