beec95f3bdb5ee9eaa09d9fd79056c1cf9370bc30122adf53bb12373fbadb452 | Triage

Sharing

General

Target

beec95f3bdb5ee9eaa09d9fd79056c1cf9370bc30122adf53bb12373fbadb452
Size

685KB
Sample

220806-gtjrdsbdap
MD5

c726f7a28ffba569cae59b734841038b
SHA1

bd0f314327d3687e773730fc5141c2c9117d48ab
SHA256

beec95f3bdb5ee9eaa09d9fd79056c1cf9370bc30122adf53bb12373fbadb452
SHA512

7a703efd3cf87d53eca3f75db2f16f08e8034be6d5a01476b85df23fa02059134862f97cf7d34817ba4c0091d426f9e8637e11f4949311afdaa58fb46a9b99f3

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  beec95f3bdb5ee9eaa09d9fd79056c1cf9370bc30122adf53bb12373fbadb452
- Size
  
  685KB
- MD5
  
  c726f7a28ffba569cae59b734841038b
- SHA1
  
  bd0f314327d3687e773730fc5141c2c9117d48ab
- SHA256
  
  beec95f3bdb5ee9eaa09d9fd79056c1cf9370bc30122adf53bb12373fbadb452
- SHA512
  
  7a703efd3cf87d53eca3f75db2f16f08e8034be6d5a01476b85df23fa02059134862f97cf7d34817ba4c0091d426f9e8637e11f4949311afdaa58fb46a9b99f3
Score

8^/10

persistence
- Downloads MZ/PE file
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Web Service

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1