93ef4244ed371d4be51955474c1713769f7973200030d8d7a5c61877236bcb3c | Triage

Sharing

General

Target

2bd2b08ca47144328cbc68041d8714be.exe
Size

2.0MB
Sample

240101-ek8caabbgm
MD5

2bd2b08ca47144328cbc68041d8714be
SHA1

6bf34b851bf47514affbb54ea56da74bde446b1e
SHA256

93ef4244ed371d4be51955474c1713769f7973200030d8d7a5c61877236bcb3c
SHA512

aa7fe3a0a0f1c8ffb8858c0b4304ca0c987b7d3c22a938b2dc1874a1e554892eba51fa9deecd669b82ba776dcb3fc3f29f5d8aa09106dff1a0ca63b962a2c3ca
SSDEEP

49152:WaUQl+AMminT6xkk26lWehIlbJZ7a07xznKMj5RyXE1ID1PX:DLIAMmuu9Ym+xznKMj58aIxPX

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  2bd2b08ca47144328cbc68041d8714be.exe
- Size
  
  2.0MB
- MD5
  
  2bd2b08ca47144328cbc68041d8714be
- SHA1
  
  6bf34b851bf47514affbb54ea56da74bde446b1e
- SHA256
  
  93ef4244ed371d4be51955474c1713769f7973200030d8d7a5c61877236bcb3c
- SHA512
  
  aa7fe3a0a0f1c8ffb8858c0b4304ca0c987b7d3c22a938b2dc1874a1e554892eba51fa9deecd669b82ba776dcb3fc3f29f5d8aa09106dff1a0ca63b962a2c3ca
- SSDEEP
  
  49152:WaUQl+AMminT6xkk26lWehIlbJZ7a07xznKMj5RyXE1ID1PX:DLIAMmuu9Ym+xznKMj58aIxPX
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2