a6d42ce9c848da1be899cdc96a33c7378d3b6563f616ac4e6c32b5cb1e5ccfe8 | Triage

Sharing

General

Target

a6d42ce9c848da1be899cdc96a33c7378d3b6563f616ac4e6c32b5cb1e5ccfe8
Size

1.4MB
Sample

221106-fqm4zagaep
MD5

250c1b6bcc5fe9b36a485d0debe048a0
SHA1

5ba0c24a3e61c66793e594be30ba4c2ac9401641
SHA256

a6d42ce9c848da1be899cdc96a33c7378d3b6563f616ac4e6c32b5cb1e5ccfe8
SHA512

640711b94b0e7cb6f10fa30f6062e9f90a34bc732ab45ec3a3fb40d1a9dac3e31709121b2a2585f979e0c43ea93c17b1c89826539a0877882a323628dedc1dcb
SSDEEP

24576:RNmF/mnBoDM5f7F2RdcclPqVX7TwBTGQOD6N+FrFtTp3I1gRUfbVx5rLIhkp8TR/:RYVZo5TcRB1oNp4v7L81/

Score

8^/10

discovery exploit

Malware Config

Targets

- Target
  
  a6d42ce9c848da1be899cdc96a33c7378d3b6563f616ac4e6c32b5cb1e5ccfe8
- Size
  
  1.4MB
- MD5
  
  250c1b6bcc5fe9b36a485d0debe048a0
- SHA1
  
  5ba0c24a3e61c66793e594be30ba4c2ac9401641
- SHA256
  
  a6d42ce9c848da1be899cdc96a33c7378d3b6563f616ac4e6c32b5cb1e5ccfe8
- SHA512
  
  640711b94b0e7cb6f10fa30f6062e9f90a34bc732ab45ec3a3fb40d1a9dac3e31709121b2a2585f979e0c43ea93c17b1c89826539a0877882a323628dedc1dcb
- SSDEEP
  
  24576:RNmF/mnBoDM5f7F2RdcclPqVX7TwBTGQOD6N+FrFtTp3I1gRUfbVx5rLIhkp8TR/:RYVZo5TcRB1oNp4v7L81/
Score

8^/10

discovery exploit
- Executes dropped EXE
- Possible privilege escalation attempt
  exploit
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexploit

behavioral2

discoveryexploit