71b664bccb566afd61da3ed7d5dadcd9717dd6083d133522f7b3b4adeffb78bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5c7b45ea272a12bf5719812037a28900.exe
Size

3.0MB
Sample

231104-jq71xsdb9s
MD5

5c7b45ea272a12bf5719812037a28900
SHA1

640c9b48a741277bda8ccab0ad98bae2c2ae9784
SHA256

71b664bccb566afd61da3ed7d5dadcd9717dd6083d133522f7b3b4adeffb78bd
SHA512

3b4834f8d46d965773a0bebc1f1b90c9b954858bde12a7813207174010baf6c96fabfd9bc33bb7b5ef15512a0cec4071a4c747a0cb6e096d09a614c222e667c7
SSDEEP

49152:j495UciMmq/NhjX5p3JOCdLAweZnE5c965nqqIP2ItdA:jk5LhzACdLAlnE5co5nqqIP2ItdA

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  NEAS.5c7b45ea272a12bf5719812037a28900.exe
- Size
  
  3.0MB
- MD5
  
  5c7b45ea272a12bf5719812037a28900
- SHA1
  
  640c9b48a741277bda8ccab0ad98bae2c2ae9784
- SHA256
  
  71b664bccb566afd61da3ed7d5dadcd9717dd6083d133522f7b3b4adeffb78bd
- SHA512
  
  3b4834f8d46d965773a0bebc1f1b90c9b954858bde12a7813207174010baf6c96fabfd9bc33bb7b5ef15512a0cec4071a4c747a0cb6e096d09a614c222e667c7
- SSDEEP
  
  49152:j495UciMmq/NhjX5p3JOCdLAweZnE5c965nqqIP2ItdA:jk5LhzACdLAlnE5co5nqqIP2ItdA
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2