caa28fd404cf139d5c8205a36a7764e45c49d60a257a7b5cf3e170c1dc3c56f1 | Triage

Sharing

General

Target

caa28fd404cf139d5c8205a36a7764e45c49d60a257a7b5cf3e170c1dc3c56f1
Size

170KB
Sample

220919-wrfpaafehr
MD5

1278821e57216c73df687e35c1e78714
SHA1

f886c54b552b0c7cddcdc2bc9ac0f5b12c1a7268
SHA256

caa28fd404cf139d5c8205a36a7764e45c49d60a257a7b5cf3e170c1dc3c56f1
SHA512

9f3ba0a93501affe8a356199d6605d848c34c3a56564d8b09ada07b7627de29e1966dc3d00cf742d5c2b210910ab7899aadbf9c9e85af9b725001e4f225b6ad4
SSDEEP

3072:T7zy6o1J5KnjGO+uMqlSYAbnHyZKcZ0idKGSQQRbABg:faO+uMqMnHyYKdU

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  caa28fd404cf139d5c8205a36a7764e45c49d60a257a7b5cf3e170c1dc3c56f1
- Size
  
  170KB
- MD5
  
  1278821e57216c73df687e35c1e78714
- SHA1
  
  f886c54b552b0c7cddcdc2bc9ac0f5b12c1a7268
- SHA256
  
  caa28fd404cf139d5c8205a36a7764e45c49d60a257a7b5cf3e170c1dc3c56f1
- SHA512
  
  9f3ba0a93501affe8a356199d6605d848c34c3a56564d8b09ada07b7627de29e1966dc3d00cf742d5c2b210910ab7899aadbf9c9e85af9b725001e4f225b6ad4
- SSDEEP
  
  3072:T7zy6o1J5KnjGO+uMqlSYAbnHyZKcZ0idKGSQQRbABg:faO+uMqMnHyYKdU
Score

8^/10

persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2