2e698586e4341da73b89c74db4e275bf1c73dc99186ce01ec5a378d68c422ed8 | Triage

Sharing

General

Target

0cb42e9ad739c9babef32fa029598000N.exe
Size

129KB
Sample

240715-zv2mps1hkf
MD5

0cb42e9ad739c9babef32fa029598000
SHA1

fe40949c9b47cbd3822b0934a95c171d3b60a1a6
SHA256

2e698586e4341da73b89c74db4e275bf1c73dc99186ce01ec5a378d68c422ed8
SHA512

fab95aec976083931e4348678ddcc623545043709b92c2c102c4438d0ba81938a1976e0225e1c76c53d26b0a9fc1e9369c34baa93dd88db503ec1d7f1df05a8a
SSDEEP

3072:knZjfso0f5z9f57fgDWChiOzl0LEnFvUf4FnWRYCdB:kndp0f5z77fgDNlzl0L0dUf2WRNdB

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  0cb42e9ad739c9babef32fa029598000N.exe
- Size
  
  129KB
- MD5
  
  0cb42e9ad739c9babef32fa029598000
- SHA1
  
  fe40949c9b47cbd3822b0934a95c171d3b60a1a6
- SHA256
  
  2e698586e4341da73b89c74db4e275bf1c73dc99186ce01ec5a378d68c422ed8
- SHA512
  
  fab95aec976083931e4348678ddcc623545043709b92c2c102c4438d0ba81938a1976e0225e1c76c53d26b0a9fc1e9369c34baa93dd88db503ec1d7f1df05a8a
- SSDEEP
  
  3072:knZjfso0f5z9f57fgDWChiOzl0LEnFvUf4FnWRYCdB:kndp0f5z77fgDNlzl0L0dUf2WRNdB
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation