bc78c8c935a65b8ff564461bd80bb8394ab02e9637b00a0fd16ed107b267c156 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd9f56e675bb8536e194f825011517a8.exe
Size

248KB
Sample

230802-v76pzahd51
MD5

dd9f56e675bb8536e194f825011517a8
SHA1

03f3dbdfc31d8793c371859da0f01f750c38f329
SHA256

bc78c8c935a65b8ff564461bd80bb8394ab02e9637b00a0fd16ed107b267c156
SHA512

1b1f0615b1924e1f3def772ca07a839662c227d6dfa05b4313a5f0ff9418ab411271aaeedd23c52355a8fb0f397c31d4021eef71762f377aba3430413509cba8
SSDEEP

3072:ozHgt54+nasYHc0hZ/+OJHoMKMr/RJu2LlWjJVjq12309vKK63DGA67zSq7O+Jdk:o7clMKMr/7rLUXqf9vKdZ6vSq7O+dk

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  dd9f56e675bb8536e194f825011517a8.exe
- Size
  
  248KB
- MD5
  
  dd9f56e675bb8536e194f825011517a8
- SHA1
  
  03f3dbdfc31d8793c371859da0f01f750c38f329
- SHA256
  
  bc78c8c935a65b8ff564461bd80bb8394ab02e9637b00a0fd16ed107b267c156
- SHA512
  
  1b1f0615b1924e1f3def772ca07a839662c227d6dfa05b4313a5f0ff9418ab411271aaeedd23c52355a8fb0f397c31d4021eef71762f377aba3430413509cba8
- SSDEEP
  
  3072:ozHgt54+nasYHc0hZ/+OJHoMKMr/RJu2LlWjJVjq12309vKK63DGA67zSq7O+Jdk:o7clMKMr/7rLUXqf9vKdZ6vSq7O+dk
Score

7^/10

persistence
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2