2ab0ff0bfe74a4aec79ae41e678933816ff0310c85d4ff7ee12cac1b373a54cb | Triage

Sharing

General

Target

2ab0ff0bfe74a4aec79ae41e678933816ff0310c85d4ff7ee12cac1b373a54cb
Size

144KB
Sample

240422-ywgs9afe66
MD5

a0fc663d5fac2e06ff05de3d4131638e
SHA1

677dc2b77830813cbf41fd805acdce1763145487
SHA256

2ab0ff0bfe74a4aec79ae41e678933816ff0310c85d4ff7ee12cac1b373a54cb
SHA512

4403244226b82efe9b477a098e2e3f33e3e28d5bf6b0f08df2e0fe0e248bbe65f8db45083384c5f21731feb550e7d0fb0edc81853da017d3e0b63468f9d4e7ec
SSDEEP

3072:GWMIJWZY1gTz6Anp7+s7q5s81+1zJFpriSrY1Z:wogqAnZJ25VOpe0YX

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  2ab0ff0bfe74a4aec79ae41e678933816ff0310c85d4ff7ee12cac1b373a54cb
- Size
  
  144KB
- MD5
  
  a0fc663d5fac2e06ff05de3d4131638e
- SHA1
  
  677dc2b77830813cbf41fd805acdce1763145487
- SHA256
  
  2ab0ff0bfe74a4aec79ae41e678933816ff0310c85d4ff7ee12cac1b373a54cb
- SHA512
  
  4403244226b82efe9b477a098e2e3f33e3e28d5bf6b0f08df2e0fe0e248bbe65f8db45083384c5f21731feb550e7d0fb0edc81853da017d3e0b63468f9d4e7ec
- SSDEEP
  
  3072:GWMIJWZY1gTz6Anp7+s7q5s81+1zJFpriSrY1Z:wogqAnZJ25VOpe0YX
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2