aec387e3b89af69cde8bd3b2a80582b6947b42985a1c0aeb23561a7aa27b40b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f4580f577b6fd6451a9388fd6b30370N.exe
Size

223KB
Sample

240719-qssscaxarb
MD5

9f4580f577b6fd6451a9388fd6b30370
SHA1

7ae0e3cfdbfa2fd949187996210875e4d6718f3e
SHA256

aec387e3b89af69cde8bd3b2a80582b6947b42985a1c0aeb23561a7aa27b40b7
SHA512

9bfbb9214e26cd600f4367bbdfba8dda3c1a2c6a70cdb94ef82f56e119d46d6ffd62376a07f2e24664634d73c3a9252ba8b9db81c2c6c95b8803dc4f25eb4ba3
SSDEEP

3072:/DSp4183Sf3/pF79wS6o+gUCebPmKmh6WPsbs9L1qu/Ptm3Jqyd/4XKF:C4/LuS+WcPmKmsEsY9RqSs3JqyiXKF

Score

8^/10

persistence privilege_escalation

Malware Config

Targets

- Target
  
  9f4580f577b6fd6451a9388fd6b30370N.exe
- Size
  
  223KB
- MD5
  
  9f4580f577b6fd6451a9388fd6b30370
- SHA1
  
  7ae0e3cfdbfa2fd949187996210875e4d6718f3e
- SHA256
  
  aec387e3b89af69cde8bd3b2a80582b6947b42985a1c0aeb23561a7aa27b40b7
- SHA512
  
  9bfbb9214e26cd600f4367bbdfba8dda3c1a2c6a70cdb94ef82f56e119d46d6ffd62376a07f2e24664634d73c3a9252ba8b9db81c2c6c95b8803dc4f25eb4ba3
- SSDEEP
  
  3072:/DSp4183Sf3/pF79wS6o+gUCebPmKmh6WPsbs9L1qu/Ptm3Jqyd/4XKF:C4/LuS+WcPmKmsEsY9RqSs3JqyiXKF
Score

8^/10

persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

persistenceprivilege_escalation