5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28a | Triage

Sharing

General

Target

5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28aN
Size

3.3MB
Sample

240920-3khcvsvcnk
MD5

4f466872751acb3af771b6dba52009b0
SHA1

9498ccb89b2266a383d19cf50df146d12dd8a437
SHA256

5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28a
SHA512

1ca9a8418a708a4f94b6553dcd7574e368a6281f86136f2091707c5ba009466e322db7785d172d3286a4641d88454140830a1f1cc8dc466c3d4ac06dc127200c
SSDEEP

49152:mD/2YbJs2RXoxqzjOS5pFy14gtHGZD3/E4in2Pwk1I0ndLRHpEfK/lzZNTha/:0/1iQXoxe/5pu4d3VtdLRJuMTK

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28aN
- Size
  
  3.3MB
- MD5
  
  4f466872751acb3af771b6dba52009b0
- SHA1
  
  9498ccb89b2266a383d19cf50df146d12dd8a437
- SHA256
  
  5822bad2c7af0ed5cbcb913fbb590ab09156d4a70bef5e53e98270b02f5dd28a
- SHA512
  
  1ca9a8418a708a4f94b6553dcd7574e368a6281f86136f2091707c5ba009466e322db7785d172d3286a4641d88454140830a1f1cc8dc466c3d4ac06dc127200c
- SSDEEP
  
  49152:mD/2YbJs2RXoxqzjOS5pFy14gtHGZD3/E4in2Pwk1I0ndLRHpEfK/lzZNTha/:0/1iQXoxe/5pu4d3VtdLRJuMTK
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2