ae0a4a5d24db7b1d7c89dca9f5b6425b49938b1e571dc3860c75efe463c1da95 | Triage

Sharing

General

Target

ae0a4a5d24db7b1d7c89dca9f5b6425b49938b1e571dc3860c75efe463c1da95
Size

7.2MB
Sample

230526-ze7tsahb23
MD5

ec67e172c07b1f626d106e677116a7d7
SHA1

a26fdc549812459a4117776c4c944ce3591bffeb
SHA256

ae0a4a5d24db7b1d7c89dca9f5b6425b49938b1e571dc3860c75efe463c1da95
SHA512

4850322341b59bbf16fd62c12afee588c173b7e762fe81f1f42d2b0a481e4db7f1bab8171a5b9a9cc461f0113d5cae9385c52d5e5b62bffafde6b466e5283bf2
SSDEEP

98304:lfMx7F5obE1jyujmP1zIfwH0EZlLX/tNUcjsbz6TA+NWlVN9:dMYAe1P1zIIzlLX/whiM+0F

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ae0a4a5d24db7b1d7c89dca9f5b6425b49938b1e571dc3860c75efe463c1da95
- Size
  
  7.2MB
- MD5
  
  ec67e172c07b1f626d106e677116a7d7
- SHA1
  
  a26fdc549812459a4117776c4c944ce3591bffeb
- SHA256
  
  ae0a4a5d24db7b1d7c89dca9f5b6425b49938b1e571dc3860c75efe463c1da95
- SHA512
  
  4850322341b59bbf16fd62c12afee588c173b7e762fe81f1f42d2b0a481e4db7f1bab8171a5b9a9cc461f0113d5cae9385c52d5e5b62bffafde6b466e5283bf2
- SSDEEP
  
  98304:lfMx7F5obE1jyujmP1zIfwH0EZlLX/tNUcjsbz6TA+NWlVN9:dMYAe1P1zIIzlLX/whiM+0F
Score

7^/10

discovery persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence