6613acb18cb8bf501fba619f04f8298e5e633cb220c450212bbc9dd2bef9538d | Triage

Sharing

General

Target

ska2pwej.aeh.exe
Size

5.0MB
Sample

240722-1l8kbszcmf
MD5

929335d847f8265c0a8648dd6d593605
SHA1

0ff9acf1293ed8b313628269791d09e6413fca56
SHA256

6613acb18cb8bf501fba619f04f8298e5e633cb220c450212bbc9dd2bef9538d
SHA512

7c9a4d1bec430503cc355dc76955d341e001b06196d4b508cc35d64feb2e8ba30e824e7c3a11c27135d7d99801f45f62a5b558563b4c78f89f5d156a929063fd
SSDEEP

98304:rEzNRQ8SgI9jutylH+PjqHbUjHieB/12emQvYP:wNrPGC0ePjqHbUjHicQs2

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  ska2pwej.aeh.exe
- Size
  
  5.0MB
- MD5
  
  929335d847f8265c0a8648dd6d593605
- SHA1
  
  0ff9acf1293ed8b313628269791d09e6413fca56
- SHA256
  
  6613acb18cb8bf501fba619f04f8298e5e633cb220c450212bbc9dd2bef9538d
- SHA512
  
  7c9a4d1bec430503cc355dc76955d341e001b06196d4b508cc35d64feb2e8ba30e824e7c3a11c27135d7d99801f45f62a5b558563b4c78f89f5d156a929063fd
- SSDEEP
  
  98304:rEzNRQ8SgI9jutylH+PjqHbUjHieB/12emQvYP:wNrPGC0ePjqHbUjHicQs2
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence