a00f9ed71ccde7084c4a0ab17c9a10456c8abd2f70e88a3cc044d315a732010d

Resubmissions

21-11-2024 14:18

241121-rmrtjascmd 10

21-11-2024 14:03

241121-rcsm3stbjp 6

Sharing

Copy URL

Twitter E-mail

General

Target

Documento che prova la violazione dei diritti di proprietà intellettuale2011BHQ2.zip
Size

156.5MB
Sample

241121-rmrtjascmd
MD5

5ff3ec12b276297e4445acf00be65920
SHA1

fd1ea97aed2b7f25b4aaf806c9b56d3a2ac593a2
SHA256

a00f9ed71ccde7084c4a0ab17c9a10456c8abd2f70e88a3cc044d315a732010d
SHA512

9cad62d933cecef999d58e48f6127f6b9dd55148e19bb40a761cbfc538f9893b156f6399898b5541b24ec6f9d7b2adbd5e24ed668c1a6bef3776104578c0fb17
SSDEEP

3145728:naUzI7PHmFJiW4Ls9zIVsgrTAWvgGNQ3PEoWBqKOoTJtZFijjdnTnVuIhKZ2EQCB:nBFJiBA938zBOa6jJw9Z2Z3Ei/E

Score

10^/10

Malware Config

Targets

- Target
  
  Documento che prova la violazione dei diritti di proprietà intellettuale2011BHQ2.exe
- Size
  
  6.1MB
- MD5
  
  4864a55cff27f686023456a22371e790
- SHA1
  
  6ed30c0371fe167d38411bfa6d720fcdcacc4f4c
- SHA256
  
  08c7fb6067acc8ac207d28ab616c9ea5bc0d394956455d6a3eecb73f8010f7a2
- SHA512
  
  4bd3a16435cca6ce7a7aa829eb967619a8b7c02598474e634442cffc55935870d54d844a04496bf9c7e8c29c40fae59ac6eb39c8550c091d06a28211491d0bfb
- SSDEEP
  
  98304:VZQIM+/nv/CDoAkYwpAa5ge1zZ/jtdZwUkQ:bJCKlA2VKUz
Score

10^/10

discovery persistence
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Suspicious use of NtCreateUserProcessOtherParentProcess

Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2