4500f8d91c1e1e888064d93818db065eb5189c0d9bb8640acd5a0639059d4d9b | Triage

Sharing

General

Target

4500f8d91c1e1e888064d93818db065eb5189c0d9bb8640acd5a0639059d4d9b
Size

1.4MB
Sample

221002-3hwsgafdb8
MD5

41567638ed986e800ede778a0d121b30
SHA1

9cc68d2a46eace0644ccb9b42ed1ba22ed7f4a77
SHA256

4500f8d91c1e1e888064d93818db065eb5189c0d9bb8640acd5a0639059d4d9b
SHA512

90c94a7ff68482833dbe3e6707f76c4ae0aafd2f97ef8736f3a2f1240672dcfebe0de7ed542d2cc08a9fbaf30a693d350802f5b34960979b889f48ecd7e8eea0
SSDEEP

24576:rNmF/mnBoDM5f7F2hQHhToIzdF9s8kwWcMXixJH9GSG+VLUx3GHE07p:rYVZo5TchQBvj9tWXaJHkMLhkSp

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  4500f8d91c1e1e888064d93818db065eb5189c0d9bb8640acd5a0639059d4d9b
- Size
  
  1.4MB
- MD5
  
  41567638ed986e800ede778a0d121b30
- SHA1
  
  9cc68d2a46eace0644ccb9b42ed1ba22ed7f4a77
- SHA256
  
  4500f8d91c1e1e888064d93818db065eb5189c0d9bb8640acd5a0639059d4d9b
- SHA512
  
  90c94a7ff68482833dbe3e6707f76c4ae0aafd2f97ef8736f3a2f1240672dcfebe0de7ed542d2cc08a9fbaf30a693d350802f5b34960979b889f48ecd7e8eea0
- SSDEEP
  
  24576:rNmF/mnBoDM5f7F2hQHhToIzdF9s8kwWcMXixJH9GSG+VLUx3GHE07p:rYVZo5TchQBvj9tWXaJHkMLhkSp
Score

8^/10

discovery exploit
- Executes dropped EXE
- Possible privilege escalation attempt
  exploit
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploit

behavioral2

discoveryexploit