e0fb37f8e7fe70a7e42aa6c668ae4fa98e5a5bc47b252d9b9eafb80278867bae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b04255937d197c6c1bbb9961e7f5684
Size

384KB
Sample

240127-xmmgpsaac9
MD5

7b04255937d197c6c1bbb9961e7f5684
SHA1

c2299ef85387af5de6cba42ed5ece472dd15e445
SHA256

e0fb37f8e7fe70a7e42aa6c668ae4fa98e5a5bc47b252d9b9eafb80278867bae
SHA512

3a14c46a39db379f3a7f92b36fe6294030b668314aa4a56e56caec70f121c8764a9ec86456f87ca493165b3472bbe7ac6735fdcfdf990895f843430a45b4be81
SSDEEP

3072:9aeV01gT9+Obqs252huwtjB5Ad05AYJiX0cFXAjJBhU+I5:V7cwtjQ4ApQFnB

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  7b04255937d197c6c1bbb9961e7f5684
- Size
  
  384KB
- MD5
  
  7b04255937d197c6c1bbb9961e7f5684
- SHA1
  
  c2299ef85387af5de6cba42ed5ece472dd15e445
- SHA256
  
  e0fb37f8e7fe70a7e42aa6c668ae4fa98e5a5bc47b252d9b9eafb80278867bae
- SHA512
  
  3a14c46a39db379f3a7f92b36fe6294030b668314aa4a56e56caec70f121c8764a9ec86456f87ca493165b3472bbe7ac6735fdcfdf990895f843430a45b4be81
- SSDEEP
  
  3072:9aeV01gT9+Obqs252huwtjB5Ad05AYJiX0cFXAjJBhU+I5:V7cwtjQ4ApQFnB
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2