0eb3a89844574320db66d09f8392e93dad4468f4969fa1bc042b411b6e84ebe1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eb3a89844574320db66d09f8392e93dad4468f4969fa1bc042b411b6e84ebe1
Size

408KB
Sample

240708-xpharstfjj
MD5

a388f402fae9d47c5a0417b52bcf4ef8
SHA1

47c1baf294070554e81d1bd32c65557e2b4ea704
SHA256

0eb3a89844574320db66d09f8392e93dad4468f4969fa1bc042b411b6e84ebe1
SHA512

daa936446e499d2543b24e0c3835ca3f821329a103935b85f34d331bd71dbdec6fd271bf8dbb434a194bc62fd1bc97c65f550ccfa62a408226342d88ba8a8e94
SSDEEP

3072:CEGh0oJl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGnldOe2MUVg3vTeKcAEciTBqr3jy

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  0eb3a89844574320db66d09f8392e93dad4468f4969fa1bc042b411b6e84ebe1
- Size
  
  408KB
- MD5
  
  a388f402fae9d47c5a0417b52bcf4ef8
- SHA1
  
  47c1baf294070554e81d1bd32c65557e2b4ea704
- SHA256
  
  0eb3a89844574320db66d09f8392e93dad4468f4969fa1bc042b411b6e84ebe1
- SHA512
  
  daa936446e499d2543b24e0c3835ca3f821329a103935b85f34d331bd71dbdec6fd271bf8dbb434a194bc62fd1bc97c65f550ccfa62a408226342d88ba8a8e94
- SSDEEP
  
  3072:CEGh0oJl3OiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBf3:CEGnldOe2MUVg3vTeKcAEciTBqr3jy
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2