General

  • Target

    bccfc1708d0a502c7e162d44e76ea6a4

  • Size

    293KB

  • Sample

    240309-zzkjzsah9y

  • MD5

    bccfc1708d0a502c7e162d44e76ea6a4

  • SHA1

    95f5e2037a7c5a55c2788970d0be3da541485fed

  • SHA256

    b8914b69268957fa1fa00e5bf3025f307960f2f4ba9168614f45eb713cf4ce36

  • SHA512

    3cac224121f9cab8e6c9f63a267e561f081d1b201987dc43435af895750b5daae868463ddb3eb2d18fcff2a77e104b56b34cadea2147807d2ef70974a8f711c9

  • SSDEEP

    6144:yPdM6MANEVzGlcEDUl4qaRYVQOJTGbusJRhgnGXcbD7Xm2BeddhMHWDiu:ENEh8cSLqdJsisDhgnGMBBedDM2Dt

Score
7/10

Malware Config

Targets

    • Target

      bccfc1708d0a502c7e162d44e76ea6a4

    • Size

      293KB

    • MD5

      bccfc1708d0a502c7e162d44e76ea6a4

    • SHA1

      95f5e2037a7c5a55c2788970d0be3da541485fed

    • SHA256

      b8914b69268957fa1fa00e5bf3025f307960f2f4ba9168614f45eb713cf4ce36

    • SHA512

      3cac224121f9cab8e6c9f63a267e561f081d1b201987dc43435af895750b5daae868463ddb3eb2d18fcff2a77e104b56b34cadea2147807d2ef70974a8f711c9

    • SSDEEP

      6144:yPdM6MANEVzGlcEDUl4qaRYVQOJTGbusJRhgnGXcbD7Xm2BeddhMHWDiu:ENEh8cSLqdJsisDhgnGMBBedDM2Dt

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

2
T1112

Tasks