5a6e77e2729bcdd5b0c2c78ef03e16109fbe083f5d11d0427863857ff0915ca6 | Triage

Sharing

General

Target

74e9f28aaaf5778b9566b19ee93d0c17
Size

50KB
Sample

240125-rnvltahcd6
MD5

74e9f28aaaf5778b9566b19ee93d0c17
SHA1

24058cf64e8a6b24f2a66623a27e55dae77d752d
SHA256

5a6e77e2729bcdd5b0c2c78ef03e16109fbe083f5d11d0427863857ff0915ca6
SHA512

16f1fff5e4b8d56ec132e1b48a7656ff49b04ec32cf94036cf467fe2221e6a42aec5ed0dc9af5874fd2d3c2be8fdd6649eda5e6ee2652e79a516fe607ba6c693
SSDEEP

1536:6tLBbycBpRD73B3kqZRMIONFnToIfLD3crzng:2LBbtD73B3koMIONtTBfLD3Mbg

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  74e9f28aaaf5778b9566b19ee93d0c17
- Size
  
  50KB
- MD5
  
  74e9f28aaaf5778b9566b19ee93d0c17
- SHA1
  
  24058cf64e8a6b24f2a66623a27e55dae77d752d
- SHA256
  
  5a6e77e2729bcdd5b0c2c78ef03e16109fbe083f5d11d0427863857ff0915ca6
- SHA512
  
  16f1fff5e4b8d56ec132e1b48a7656ff49b04ec32cf94036cf467fe2221e6a42aec5ed0dc9af5874fd2d3c2be8fdd6649eda5e6ee2652e79a516fe607ba6c693
- SSDEEP
  
  1536:6tLBbycBpRD73B3kqZRMIONFnToIfLD3crzng:2LBbtD73B3koMIONtTBfLD3Mbg
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2