18d53eb00c9da946845c716cd3eeb4c8e55f6ee7274ab549b141e109f20a8460 | Triage

Sharing

General

Target

NEAS.78e94e4b8caf1dd793972b6682fba330.exe
Size

255KB
Sample

231013-y9bjdsbb9w
MD5

78e94e4b8caf1dd793972b6682fba330
SHA1

9481b9f8a565d1f41a4181b72cbd4471d41f698b
SHA256

18d53eb00c9da946845c716cd3eeb4c8e55f6ee7274ab549b141e109f20a8460
SHA512

a4fa53e4ea7240d46a44a805147738e074ec1961ab81df7e5c42ff286fd68763f749d43feb868812b0060510a11f820372bc8d2f1bb7e7fa55874279c2964ae4
SSDEEP

6144:+tKe6YiDdv3m3mgKHI6Fh7Iy2oglzxCsC8iFHKOW7cY/Ij:+tKe6Zv23YnFhBsC8iFHHWI

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.78e94e4b8caf1dd793972b6682fba330.exe
- Size
  
  255KB
- MD5
  
  78e94e4b8caf1dd793972b6682fba330
- SHA1
  
  9481b9f8a565d1f41a4181b72cbd4471d41f698b
- SHA256
  
  18d53eb00c9da946845c716cd3eeb4c8e55f6ee7274ab549b141e109f20a8460
- SHA512
  
  a4fa53e4ea7240d46a44a805147738e074ec1961ab81df7e5c42ff286fd68763f749d43feb868812b0060510a11f820372bc8d2f1bb7e7fa55874279c2964ae4
- SSDEEP
  
  6144:+tKe6YiDdv3m3mgKHI6Fh7Iy2oglzxCsC8iFHKOW7cY/Ij:+tKe6Zv23YnFhBsC8iFHHWI
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2