5628a0c42720774b558738d129278e4df0c21d193f2ba0d8d9abc370b0e8f689 | Triage

Sharing

General

Target

5628a0c42720774b558738d129278e4df0c21d193f2ba0d8d9abc370b0e8f689
Size

260KB
Sample

240416-16qv1sff4t
MD5

59105763ed186bdb837026ad63003939
SHA1

6980c850bcf9f572fa8e635c7c6b10fc1779c87f
SHA256

5628a0c42720774b558738d129278e4df0c21d193f2ba0d8d9abc370b0e8f689
SHA512

f6c681626de5431cef017b548450485e1bbad749aa80ab02e963dbaa71b07876725a2fdc3dea1797b98c51d76f07c25c8f519dae15dae70e25e1ec76922a6e03
SSDEEP

6144:ojZzVYQckMANv494D83pdcsTAROvgEMHHEMH:ojZ5YQckMANv494D83peoMEM

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  5628a0c42720774b558738d129278e4df0c21d193f2ba0d8d9abc370b0e8f689
- Size
  
  260KB
- MD5
  
  59105763ed186bdb837026ad63003939
- SHA1
  
  6980c850bcf9f572fa8e635c7c6b10fc1779c87f
- SHA256
  
  5628a0c42720774b558738d129278e4df0c21d193f2ba0d8d9abc370b0e8f689
- SHA512
  
  f6c681626de5431cef017b548450485e1bbad749aa80ab02e963dbaa71b07876725a2fdc3dea1797b98c51d76f07c25c8f519dae15dae70e25e1ec76922a6e03
- SSDEEP
  
  6144:ojZzVYQckMANv494D83pdcsTAROvgEMHHEMH:ojZ5YQckMANv494D83peoMEM
Score

7^/10

persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2