e53f273b75d83a4101e23605dec2876ea5513f459c3c388c8a58944dc2491002 | Triage

Sharing

General

Target

NEAS.fe3bb50986a528b9bb04f7e056d8d3c0_JC.exe
Size

1.5MB
Sample

231102-qtb6zsce7z
MD5

fe3bb50986a528b9bb04f7e056d8d3c0
SHA1

15155ecf77a7b7f3d0eece76fc986769e696d373
SHA256

e53f273b75d83a4101e23605dec2876ea5513f459c3c388c8a58944dc2491002
SHA512

934972e64bd596c901658bb1e72d983f66616305ebb71e02ee2adfd7ac9b59c2f36dde3ac1e13b55fc248cfa87ac884f3ab36d4bf58db01f7b74044735667b4a
SSDEEP

24576:pxWVeyRYWc40RDI1pE25HLaHh3NXYtVvMGNAOfBPCQgtkBfodSq:p8YWl3wWo5KkGNA+CQikBfOSq

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  NEAS.fe3bb50986a528b9bb04f7e056d8d3c0_JC.exe
- Size
  
  1.5MB
- MD5
  
  fe3bb50986a528b9bb04f7e056d8d3c0
- SHA1
  
  15155ecf77a7b7f3d0eece76fc986769e696d373
- SHA256
  
  e53f273b75d83a4101e23605dec2876ea5513f459c3c388c8a58944dc2491002
- SHA512
  
  934972e64bd596c901658bb1e72d983f66616305ebb71e02ee2adfd7ac9b59c2f36dde3ac1e13b55fc248cfa87ac884f3ab36d4bf58db01f7b74044735667b4a
- SSDEEP
  
  24576:pxWVeyRYWc40RDI1pE25HLaHh3NXYtVvMGNAOfBPCQgtkBfodSq:p8YWl3wWo5KkGNA+CQikBfOSq
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence