4436673d84fddcaa03a7f55523c808dcac99c45315699e4c33c12c216ef11b77 | Triage

Sharing

General

Target

4436673d84fddcaa03a7f55523c808dcac99c45315699e4c33c12c216ef11b77
Size

369KB
Sample

240530-z343sshh81
MD5

379bf3989a7f383168df66e85c62c693
SHA1

0e170e55353de1a0794efcdd927b9df75860370e
SHA256

4436673d84fddcaa03a7f55523c808dcac99c45315699e4c33c12c216ef11b77
SHA512

9907b1ddbfb92bb570518f9fbd9f34bf14f7d5dcfa0053cbb91ed23b0bf0932aab72fb01d6988eebbdbd7f88812f08e52e4e26b323119f0e3dc2cf1e1663eb8f
SSDEEP

6144:7Drk+N3Sz9pyAD6BQ9ObH2v6F1fvFeeNiIUPbGrTgi:7sCsJ2BriAfteeNiIocgi

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  4436673d84fddcaa03a7f55523c808dcac99c45315699e4c33c12c216ef11b77
- Size
  
  369KB
- MD5
  
  379bf3989a7f383168df66e85c62c693
- SHA1
  
  0e170e55353de1a0794efcdd927b9df75860370e
- SHA256
  
  4436673d84fddcaa03a7f55523c808dcac99c45315699e4c33c12c216ef11b77
- SHA512
  
  9907b1ddbfb92bb570518f9fbd9f34bf14f7d5dcfa0053cbb91ed23b0bf0932aab72fb01d6988eebbdbd7f88812f08e52e4e26b323119f0e3dc2cf1e1663eb8f
- SSDEEP
  
  6144:7Drk+N3Sz9pyAD6BQ9ObH2v6F1fvFeeNiIUPbGrTgi:7sCsJ2BriAfteeNiIocgi
Score

7^/10

persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2