14c7bec7369d4175c6d92554b033862b3847ff98a04dfebdf9f5bb30180ed13e | Triage

Sharing

General

Target

Exes_5b4bd24d6240f467bfbc74803c9f15b0.exe
Size

272KB
Sample

190812-ley7gjfcrn
MD5

5b4bd24d6240f467bfbc74803c9f15b0
SHA1

c17f98c182d299845c54069872e8137645768a1a
SHA256

14c7bec7369d4175c6d92554b033862b3847ff98a04dfebdf9f5bb30180ed13e
SHA512

a896acc38a6ff9641b0803f0598369c0d4fa8e38da28c1653c57948fe5e3274880d1b2e7959cd1b1da43375a1318b3ba72e13240bf40b27c852ee72bbb16cadc

Score

N/A

Malware Config

Targets

- Target
  
  Exes_5b4bd24d6240f467bfbc74803c9f15b0.exe
- Size
  
  272KB
- MD5
  
  5b4bd24d6240f467bfbc74803c9f15b0
- SHA1
  
  c17f98c182d299845c54069872e8137645768a1a
- SHA256
  
  14c7bec7369d4175c6d92554b033862b3847ff98a04dfebdf9f5bb30180ed13e
- SHA512
  
  a896acc38a6ff9641b0803f0598369c0d4fa8e38da28c1653c57948fe5e3274880d1b2e7959cd1b1da43375a1318b3ba72e13240bf40b27c852ee72bbb16cadc
Score

N/A
- Deletes itself
- Loads dropped DLL
task1 task2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Execution through Module Load

PowerShell

Persistence

Privilege Escalation

Access Token Manipulation

Process Injection

Defense Evasion

Access Token Manipulation

File Deletion

Process Injection

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

task1

task2