cfd5cb0235efa4d4b562b923523fec711983b69107c51d5d3214b5a8f21b7df7 | Triage

Sharing

General

Target

cfd5cb0235efa4d4b562b923523fec711983b69107c51d5d3214b5a8f21b7df7
Size

10KB
Sample

220918-2yyfkadgd5
MD5

9e62a82709d4df9afbe188b2c645e8db
SHA1

d73c739f4158c0c640d21d54d4bd8e19d281bc38
SHA256

cfd5cb0235efa4d4b562b923523fec711983b69107c51d5d3214b5a8f21b7df7
SHA512

584e5f087eb5e339941ab64cb87f15c36e70df894ba10e15a678295945e65d70223d77bdee21d8a5e9129fdbf69d89827177266f46b20c3b2d6f9a332c0d6048
SSDEEP

192:RuWsSXm7DcyUjOEa5MAFiiGDevnXgeiUIwIGmMe4p53qaI+R1F12IA2eG4sGjZrD:RuWtmPcyUjHa57sMvnXzIJGmF0AbzZ3P

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  cfd5cb0235efa4d4b562b923523fec711983b69107c51d5d3214b5a8f21b7df7
- Size
  
  10KB
- MD5
  
  9e62a82709d4df9afbe188b2c645e8db
- SHA1
  
  d73c739f4158c0c640d21d54d4bd8e19d281bc38
- SHA256
  
  cfd5cb0235efa4d4b562b923523fec711983b69107c51d5d3214b5a8f21b7df7
- SHA512
  
  584e5f087eb5e339941ab64cb87f15c36e70df894ba10e15a678295945e65d70223d77bdee21d8a5e9129fdbf69d89827177266f46b20c3b2d6f9a332c0d6048
- SSDEEP
  
  192:RuWsSXm7DcyUjOEa5MAFiiGDevnXgeiUIwIGmMe4p53qaI+R1F12IA2eG4sGjZrD:RuWtmPcyUjHa57sMvnXzIJGmF0AbzZ3P
Score

8^/10

persistence
- Executes dropped EXE
- Sets service image path in registry
  persistence
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2