16f7d9d609c24c5af75c0141059d49008eb9b1f016d198e224bdb486668cc7b5 | Triage

Sharing

General

Target

Business-Empire--RichMan_com.ttterbagames.businesssimulator_gameslolc_27993235.exe
Size

3.3MB
Sample

240710-lfggbszcmm
MD5

e23d97827ea3c90cd85f2d11402e8940
SHA1

67c01979b3516f9c3082cc05367142a74e413be8
SHA256

16f7d9d609c24c5af75c0141059d49008eb9b1f016d198e224bdb486668cc7b5
SHA512

e9dfd9ebf77aa615b17c05f99a5efed0c5dc993b7ca59800aa7ffa45d0d7fe4e207d0e4386c4fd9b11ceb49b5a4d28b4014ab9d6327ed86a8321cd9f3e90f646
SSDEEP

98304:EyasyD6Lvd557Vh2EKTlpFGuKIKRv6owpuC:XyOT57V7jFiowgC

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  Business-Empire--RichMan_com.ttterbagames.businesssimulator_gameslolc_27993235.exe
- Size
  
  3.3MB
- MD5
  
  e23d97827ea3c90cd85f2d11402e8940
- SHA1
  
  67c01979b3516f9c3082cc05367142a74e413be8
- SHA256
  
  16f7d9d609c24c5af75c0141059d49008eb9b1f016d198e224bdb486668cc7b5
- SHA512
  
  e9dfd9ebf77aa615b17c05f99a5efed0c5dc993b7ca59800aa7ffa45d0d7fe4e207d0e4386c4fd9b11ceb49b5a4d28b4014ab9d6327ed86a8321cd9f3e90f646
- SSDEEP
  
  98304:EyasyD6Lvd557Vh2EKTlpFGuKIKRv6owpuC:XyOT57V7jFiowgC
Score

8^/10

persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1