adb60302050b3f9d05690a86b14212a35a49be08617e3b1136da91429267d0d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adb60302050b3f9d05690a86b14212a35a49be08617e3b1136da91429267d0d2
Size

159KB
Sample

240920-1zse9szhnh
MD5

ab98efb2f991fe0f764a1deb7cc39b67
SHA1

a79e0646669e9ba1b2aad4896caa8a2c6b29ac23
SHA256

adb60302050b3f9d05690a86b14212a35a49be08617e3b1136da91429267d0d2
SHA512

5baf23e7e46ce94c1daa9e7fb0479f11316c5c3fce826db05dd2f59bfa77594f222f25e5f97d95bb911df189a31da1677ceb3d5c673e4d990186f965fcdc06f4
SSDEEP

3072:Fx1TajppFJN7hyH8He6am2iQPgpKoVjM3N9XZbcqZcquHRg:j1TaFpR7UIttrQGvC991c+cD

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  adb60302050b3f9d05690a86b14212a35a49be08617e3b1136da91429267d0d2
- Size
  
  159KB
- MD5
  
  ab98efb2f991fe0f764a1deb7cc39b67
- SHA1
  
  a79e0646669e9ba1b2aad4896caa8a2c6b29ac23
- SHA256
  
  adb60302050b3f9d05690a86b14212a35a49be08617e3b1136da91429267d0d2
- SHA512
  
  5baf23e7e46ce94c1daa9e7fb0479f11316c5c3fce826db05dd2f59bfa77594f222f25e5f97d95bb911df189a31da1677ceb3d5c673e4d990186f965fcdc06f4
- SSDEEP
  
  3072:Fx1TajppFJN7hyH8He6am2iQPgpKoVjM3N9XZbcqZcquHRg:j1TaFpR7UIttrQGvC991c+cD
Score

7^/10

discovery persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence