13fe33adab0639539b081e533530b4008b240b3f8cc5e2fad30e567017b52fb2 | Triage

Sharing

General

Target

NEAS.977195272899a78ff725ea477fb04cf3.exe
Size

870KB
Sample

231031-kkf6paaa8z
MD5

977195272899a78ff725ea477fb04cf3
SHA1

241696f4a1bcc833d0231f22536dc439a7454ba3
SHA256

13fe33adab0639539b081e533530b4008b240b3f8cc5e2fad30e567017b52fb2
SHA512

a8e396372ad76267b178febdc10219341a4336bb7b7e4e2c1bf448d2e2e4f026aef49d30d43dfbb8c556e03bc727689e8bded60b0354bb9f0769a9b6df126857
SSDEEP

3072:MGjhaq5iL0beJQZt32wLji5DlsODxRPNDkjmHzW9hUd56JsuBSjwGPmO12i1Dzb2:Hha8iAx+1zwjmHd6vB/jO11zzss6TQ

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.977195272899a78ff725ea477fb04cf3.exe
- Size
  
  870KB
- MD5
  
  977195272899a78ff725ea477fb04cf3
- SHA1
  
  241696f4a1bcc833d0231f22536dc439a7454ba3
- SHA256
  
  13fe33adab0639539b081e533530b4008b240b3f8cc5e2fad30e567017b52fb2
- SHA512
  
  a8e396372ad76267b178febdc10219341a4336bb7b7e4e2c1bf448d2e2e4f026aef49d30d43dfbb8c556e03bc727689e8bded60b0354bb9f0769a9b6df126857
- SSDEEP
  
  3072:MGjhaq5iL0beJQZt32wLji5DlsODxRPNDkjmHzW9hUd56JsuBSjwGPmO12i1Dzb2:Hha8iAx+1zwjmHd6vB/jO11zzss6TQ
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2