4312494300c296db42b297a32a9040d713fb520a2688baf6aa681d85d1f2b07e | Triage

Sharing

General

Target

4312494300c296db42b297a32a9040d713fb520a2688baf6aa681d85d1f2b07e
Size

8KB
Sample

240319-ghmnxabc97
MD5

9c904a91b84a868da64f37aad16b7672
SHA1

6d951ca75e93019218d859f51ad67a205acf3b10
SHA256

4312494300c296db42b297a32a9040d713fb520a2688baf6aa681d85d1f2b07e
SHA512

cf096905268e473f9863bb959556ffc88ff0bc6323aeb9f28551c3532d53a38cb6b84094ac4607bc07edf8c8c3e15e442645ca8405afcde3a90504d8fc4ffb1e
SSDEEP

192:bcoYSKbt0JoWRueGNtAtAPCzT3YWAMCzOL:goAZ0JoPAtAPA38

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  4312494300c296db42b297a32a9040d713fb520a2688baf6aa681d85d1f2b07e
- Size
  
  8KB
- MD5
  
  9c904a91b84a868da64f37aad16b7672
- SHA1
  
  6d951ca75e93019218d859f51ad67a205acf3b10
- SHA256
  
  4312494300c296db42b297a32a9040d713fb520a2688baf6aa681d85d1f2b07e
- SHA512
  
  cf096905268e473f9863bb959556ffc88ff0bc6323aeb9f28551c3532d53a38cb6b84094ac4607bc07edf8c8c3e15e442645ca8405afcde3a90504d8fc4ffb1e
- SSDEEP
  
  192:bcoYSKbt0JoWRueGNtAtAPCzT3YWAMCzOL:goAZ0JoPAtAPA38
Score

9^/10

persistence
- UPX dump on OEP (original entry point)
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2