dcdb352e04e2c60f1ac4d3bec3e33300e412b4673ffc20645d0ff527948b5a76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1511bafe2959ec33f0bbf66f3796af10N.exe
Size

52KB
Sample

240714-y5a23atckm
MD5

1511bafe2959ec33f0bbf66f3796af10
SHA1

8d638c162446338036cc52560dd3089f0b7aee1e
SHA256

dcdb352e04e2c60f1ac4d3bec3e33300e412b4673ffc20645d0ff527948b5a76
SHA512

e23bb5febe2c9598c7b63b565dabf1806f422c408e3f7849b26154a753061a2b393b355ea81bee7a0ff8feee772a697c580c09369746915a4f499e1ace01a296
SSDEEP

1536:lAo0ej2d6rnJwwvlKlIUBvsh+hITvNIRh+:lAo1lOwvlKlXBvsh+hITvNIRh+

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  1511bafe2959ec33f0bbf66f3796af10N.exe
- Size
  
  52KB
- MD5
  
  1511bafe2959ec33f0bbf66f3796af10
- SHA1
  
  8d638c162446338036cc52560dd3089f0b7aee1e
- SHA256
  
  dcdb352e04e2c60f1ac4d3bec3e33300e412b4673ffc20645d0ff527948b5a76
- SHA512
  
  e23bb5febe2c9598c7b63b565dabf1806f422c408e3f7849b26154a753061a2b393b355ea81bee7a0ff8feee772a697c580c09369746915a4f499e1ace01a296
- SSDEEP
  
  1536:lAo0ej2d6rnJwwvlKlIUBvsh+hITvNIRh+:lAo1lOwvlKlXBvsh+hITvNIRh+
Score

7^/10

persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2