a9ae3caaf4ea5a86fedb66c0bc4339d2177496384d8b66c6bccd60284df8215e | Triage

Sharing

General

Target

NEAS.e0c835ef9d5f7643b76043f3337e4120.exe
Size

3.0MB
Sample

231022-v3fyrahh3w
MD5

e0c835ef9d5f7643b76043f3337e4120
SHA1

2f9930e3b1f96ccc4f4576be2c041c7dbf22df51
SHA256

a9ae3caaf4ea5a86fedb66c0bc4339d2177496384d8b66c6bccd60284df8215e
SHA512

2c106a602b850fca9ed6bdf82c9623ecb257f7f8ee5a3617e5ca3ecc89731d0fafddbbf5c728ccbed561913e38fd9648777c234719841ed11ba1b88e7ae46596
SSDEEP

49152:j495UciMmq/NhjX5p3JOCdLAweZnE5c965nqqIP2Itdu:jk5LhzACdLAlnE5co5nqqIP2Itdu

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  NEAS.e0c835ef9d5f7643b76043f3337e4120.exe
- Size
  
  3.0MB
- MD5
  
  e0c835ef9d5f7643b76043f3337e4120
- SHA1
  
  2f9930e3b1f96ccc4f4576be2c041c7dbf22df51
- SHA256
  
  a9ae3caaf4ea5a86fedb66c0bc4339d2177496384d8b66c6bccd60284df8215e
- SHA512
  
  2c106a602b850fca9ed6bdf82c9623ecb257f7f8ee5a3617e5ca3ecc89731d0fafddbbf5c728ccbed561913e38fd9648777c234719841ed11ba1b88e7ae46596
- SSDEEP
  
  49152:j495UciMmq/NhjX5p3JOCdLAweZnE5c965nqqIP2Itdu:jk5LhzACdLAlnE5co5nqqIP2Itdu
Score

7^/10

persistence discovery
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2