b094850166135c8f86cae3196074c21aa99aa45d0358c727e4054d75908076ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1b104d67dbd5195174ededafadc2035
Size

300KB
Sample

240311-1qmhnafd6s
MD5

c1b104d67dbd5195174ededafadc2035
SHA1

3e21d045a3cc5a86b057d7f732d5f815a39af4b5
SHA256

b094850166135c8f86cae3196074c21aa99aa45d0358c727e4054d75908076ef
SHA512

947d24aa5f4e4848e400e8299044b5a9da6d57996f94719deb3296e48aaeb5e5ce5991407f3f35a2bf20ed1ea3a71be1c9de63661f3d6503603a8d355669c59e
SSDEEP

3072:qToz5Zfwket+eE5+w+enb74G8O23vTFb++IzcfIp0oKELkjBnScuv3SeW9cltd6G:qYZfq+eEH74r1TFb+R0CKELk9vDI68

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  c1b104d67dbd5195174ededafadc2035
- Size
  
  300KB
- MD5
  
  c1b104d67dbd5195174ededafadc2035
- SHA1
  
  3e21d045a3cc5a86b057d7f732d5f815a39af4b5
- SHA256
  
  b094850166135c8f86cae3196074c21aa99aa45d0358c727e4054d75908076ef
- SHA512
  
  947d24aa5f4e4848e400e8299044b5a9da6d57996f94719deb3296e48aaeb5e5ce5991407f3f35a2bf20ed1ea3a71be1c9de63661f3d6503603a8d355669c59e
- SSDEEP
  
  3072:qToz5Zfwket+eE5+w+enb74G8O23vTFb++IzcfIp0oKELkjBnScuv3SeW9cltd6G:qYZfq+eEH74r1TFb+R0CKELk9vDI68
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence