cd4d42f77fe1861c511ae6e8ab8f25833eb800ea66ee7cb21dcb3ba261149cb6 | Triage

Sharing

General

Target

NEAS.5901328d843b287f92ff785847d23f40.exe
Size

155KB
Sample

231028-ymrbbsfh21
MD5

5901328d843b287f92ff785847d23f40
SHA1

a6b22126a07a703009ee33fb2c56185e681acb91
SHA256

cd4d42f77fe1861c511ae6e8ab8f25833eb800ea66ee7cb21dcb3ba261149cb6
SHA512

3bfa5228c53d877bfa3638280f84c483bdadc86c556a3797b67f8f15f192a3bb48d074370532274bb86750eac17b33d3f22955cdd80222192c0a750a5424b985
SSDEEP

3072:zoY0ALG7F60AM6r61ZNSaPK8bbuVSQJ0uOUR5Y7DFavjBooL:0Y0ALG7HAMt1ZEs+NJ0rMYXwe4

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.5901328d843b287f92ff785847d23f40.exe
- Size
  
  155KB
- MD5
  
  5901328d843b287f92ff785847d23f40
- SHA1
  
  a6b22126a07a703009ee33fb2c56185e681acb91
- SHA256
  
  cd4d42f77fe1861c511ae6e8ab8f25833eb800ea66ee7cb21dcb3ba261149cb6
- SHA512
  
  3bfa5228c53d877bfa3638280f84c483bdadc86c556a3797b67f8f15f192a3bb48d074370532274bb86750eac17b33d3f22955cdd80222192c0a750a5424b985
- SSDEEP
  
  3072:zoY0ALG7F60AM6r61ZNSaPK8bbuVSQJ0uOUR5Y7DFavjBooL:0Y0ALG7HAMt1ZEs+NJ0rMYXwe4
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2