ded062f160bdfd6cd9ef49c80e6f5460314a68753add70a055f24985960b0264 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded062f160bdfd6cd9ef49c80e6f5460314a68753add70a055f24985960b0264
Size

388KB
Sample

240628-d2216a1hkk
MD5

acc4d83f0e51c910107a156f9b9130dd
SHA1

7ae738c655f55f9c302f02dae4d7313f73b1d585
SHA256

ded062f160bdfd6cd9ef49c80e6f5460314a68753add70a055f24985960b0264
SHA512

187925c87672a271b77c28f1feec5eab86f7d91e13d64a875e12fc51af437ac0eab99fb37f0e63ce62b64ade00e597eb763972ac5feb216a25794c90cb7f7474
SSDEEP

6144:GLiuv8j7ZuA5ErOOze1QXh0jfLwhkLX3fgZXVK7iRyM1KTlbfLWqqZy8JqMxLUO:wi1x55UIEhlCXvkXVg8IBjLvl8NLUO

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  ded062f160bdfd6cd9ef49c80e6f5460314a68753add70a055f24985960b0264
- Size
  
  388KB
- MD5
  
  acc4d83f0e51c910107a156f9b9130dd
- SHA1
  
  7ae738c655f55f9c302f02dae4d7313f73b1d585
- SHA256
  
  ded062f160bdfd6cd9ef49c80e6f5460314a68753add70a055f24985960b0264
- SHA512
  
  187925c87672a271b77c28f1feec5eab86f7d91e13d64a875e12fc51af437ac0eab99fb37f0e63ce62b64ade00e597eb763972ac5feb216a25794c90cb7f7474
- SSDEEP
  
  6144:GLiuv8j7ZuA5ErOOze1QXh0jfLwhkLX3fgZXVK7iRyM1KTlbfLWqqZy8JqMxLUO:wi1x55UIEhlCXvkXVg8IBjLvl8NLUO
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation