fea1e1e1b65652e5a39d6f466a9ac466001e19351df5659489b91c342d763bc4 | Triage

Sharing

General

Target

NEAS.7752ab6d3b8e6b124819a2ddcff8ceb0.exe
Size

233KB
Sample

231028-yntsvaab72
MD5

7752ab6d3b8e6b124819a2ddcff8ceb0
SHA1

d3c2bb5b596f0e152cd6c18585978bc9ac4ccea4
SHA256

fea1e1e1b65652e5a39d6f466a9ac466001e19351df5659489b91c342d763bc4
SHA512

a41d062a0b7d191b065a96ac06b0894ae2308f312d3a47424b92f906c7d43276918e62432b8eae7708fda791ee38620d63a3b776eb3adc33b69390e0cc2fe0d1
SSDEEP

6144:flzoa7yNgAIQo8OLamr3RLzRnHhq92gkqE:ftB7yNgD83m3fE92TqE

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.7752ab6d3b8e6b124819a2ddcff8ceb0.exe
- Size
  
  233KB
- MD5
  
  7752ab6d3b8e6b124819a2ddcff8ceb0
- SHA1
  
  d3c2bb5b596f0e152cd6c18585978bc9ac4ccea4
- SHA256
  
  fea1e1e1b65652e5a39d6f466a9ac466001e19351df5659489b91c342d763bc4
- SHA512
  
  a41d062a0b7d191b065a96ac06b0894ae2308f312d3a47424b92f906c7d43276918e62432b8eae7708fda791ee38620d63a3b776eb3adc33b69390e0cc2fe0d1
- SSDEEP
  
  6144:flzoa7yNgAIQo8OLamr3RLzRnHhq92gkqE:ftB7yNgD83m3fE92TqE
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2