178b96df901c69ef507824e7238ca1a5419e65c3b0c8c0635fe553d06534dbfe | Triage

Sharing

General

Target

avira_es_sptl1_359962207-1678828437__pavwws.exe
Size

6.2MB
Sample

230314-1ybfcsbh71
MD5

1653a381769ab363ac9af6ac26490fda
SHA1

2c4921cab32438cd549b6253b1539134c1df25fc
SHA256

178b96df901c69ef507824e7238ca1a5419e65c3b0c8c0635fe553d06534dbfe
SHA512

1ff5bcc97867f31daed0995d9734fc01d715261ec659c985d1df32c4201530170dffd9c7f602ca01cd0dee8ba334837723dca31922847840281aadface551497
SSDEEP

49152:77m0R1yvaOQ/b5HE0qXXpDYALLRENU9Qd+buk4HsM9fEJufpHxjCZdJdZcDrgDQr:XeQ/bpEnXWU9w6ZQBLHE9WbKYd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  avira_es_sptl1_359962207-1678828437__pavwws.exe
- Size
  
  6.2MB
- MD5
  
  1653a381769ab363ac9af6ac26490fda
- SHA1
  
  2c4921cab32438cd549b6253b1539134c1df25fc
- SHA256
  
  178b96df901c69ef507824e7238ca1a5419e65c3b0c8c0635fe553d06534dbfe
- SHA512
  
  1ff5bcc97867f31daed0995d9734fc01d715261ec659c985d1df32c4201530170dffd9c7f602ca01cd0dee8ba334837723dca31922847840281aadface551497
- SSDEEP
  
  49152:77m0R1yvaOQ/b5HE0qXXpDYALLRENU9Qd+buk4HsM9fEJufpHxjCZdJdZcDrgDQr:XeQ/bpEnXWU9w6ZQBLHE9WbKYd
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2