82bbd21abee4b458058b3cd132071f9cbf0d295233a348f58ec112b074c0cb51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82bbd21abee4b458058b3cd132071f9cbf0d295233a348f58ec112b074c0cb51N
Size

187KB
Sample

241017-ygafmawbpk
MD5

3c9681eee1464a09f6e0e2f8f6decf90
SHA1

241e5a8ea4914b159648f76a7dcbe79af5db169f
SHA256

82bbd21abee4b458058b3cd132071f9cbf0d295233a348f58ec112b074c0cb51
SHA512

cf47310b42bc54f1a2f769c7ac2ea79fbcbe5f8be0e367973cfde0e1310d3b4a8e3e9c1b5004740651e08722d73e08558698eb8642a46314d0301508b864ca6b
SSDEEP

3072:EGtAyYvhXuLmAO6PepRuVQnN6l9eqU3NonQO8FZR03VEjnN9p2w7s:EgAyY5XHAV2pRuVQNASi7EiV6o

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  82bbd21abee4b458058b3cd132071f9cbf0d295233a348f58ec112b074c0cb51N
- Size
  
  187KB
- MD5
  
  3c9681eee1464a09f6e0e2f8f6decf90
- SHA1
  
  241e5a8ea4914b159648f76a7dcbe79af5db169f
- SHA256
  
  82bbd21abee4b458058b3cd132071f9cbf0d295233a348f58ec112b074c0cb51
- SHA512
  
  cf47310b42bc54f1a2f769c7ac2ea79fbcbe5f8be0e367973cfde0e1310d3b4a8e3e9c1b5004740651e08722d73e08558698eb8642a46314d0301508b864ca6b
- SSDEEP
  
  3072:EGtAyYvhXuLmAO6PepRuVQnN6l9eqU3NonQO8FZR03VEjnN9p2w7s:EgAyY5XHAV2pRuVQNASi7EiV6o
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation