cee20c67a2aef46a0e18b82fb45401245fd0e1be046ca960791d44288a7e3df2 | Triage

Sharing

General

Target

b49149f98a8ec7a964655475ab8c56b6
Size

340KB
Sample

240305-nb1qhsdd4z
MD5

b49149f98a8ec7a964655475ab8c56b6
SHA1

463510bebab62185d1736294717e1facac93b4c6
SHA256

cee20c67a2aef46a0e18b82fb45401245fd0e1be046ca960791d44288a7e3df2
SHA512

c23de96be5f86112d5f494c1b76f3bbcf488d1cdd2b69663de4f2f3fdbf58dc5456f0b2953e9ff1fb07e4bdcd8463f503f8e9ea57404c6c99281ed0393acdafe
SSDEEP

6144:T2wvPgIuVNEJF0mIl2GOmjwR03Bpf7JWw+DuDowGcJ9fUuZhPcPdJgNbLX5+nn29:TrgIuAJQl2uURWrfA1u8wG69fXhPcPdS

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  b49149f98a8ec7a964655475ab8c56b6
- Size
  
  340KB
- MD5
  
  b49149f98a8ec7a964655475ab8c56b6
- SHA1
  
  463510bebab62185d1736294717e1facac93b4c6
- SHA256
  
  cee20c67a2aef46a0e18b82fb45401245fd0e1be046ca960791d44288a7e3df2
- SHA512
  
  c23de96be5f86112d5f494c1b76f3bbcf488d1cdd2b69663de4f2f3fdbf58dc5456f0b2953e9ff1fb07e4bdcd8463f503f8e9ea57404c6c99281ed0393acdafe
- SSDEEP
  
  6144:T2wvPgIuVNEJF0mIl2GOmjwR03Bpf7JWw+DuDowGcJ9fUuZhPcPdJgNbLX5+nn29:TrgIuAJQl2uURWrfA1u8wG69fXhPcPdS
Score

7^/10

persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2