10a43f3d7b0b8841c04556e494d3df3719d837c26dc71bb2a98fca2130bf4c74 | Triage

Sharing

General

Target

10a43f3d7b0b8841c04556e494d3df3719d837c26dc71bb2a98fca2130bf4c74.exe
Size

3.1MB
Sample

240725-s3zpraxhlm
MD5

ee3e48ab4e8259a440d034bb0ffc9fe0
SHA1

bd20c0bcc4e6907c83003eac87994aa4e4456bb0
SHA256

10a43f3d7b0b8841c04556e494d3df3719d837c26dc71bb2a98fca2130bf4c74
SHA512

dd6f3022851150e78bc49b7546e9068160be704d74b1ec5755ea6a75d6298ace170b06cbd1bab4eea67c655dc734d9f06ee168b20c981e711427f6a12536b1e6
SSDEEP

49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LB39w4Su+LNfej:+R0pI/IQlUoMPdmpSpv4JkNfej

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  10a43f3d7b0b8841c04556e494d3df3719d837c26dc71bb2a98fca2130bf4c74.exe
- Size
  
  3.1MB
- MD5
  
  ee3e48ab4e8259a440d034bb0ffc9fe0
- SHA1
  
  bd20c0bcc4e6907c83003eac87994aa4e4456bb0
- SHA256
  
  10a43f3d7b0b8841c04556e494d3df3719d837c26dc71bb2a98fca2130bf4c74
- SHA512
  
  dd6f3022851150e78bc49b7546e9068160be704d74b1ec5755ea6a75d6298ace170b06cbd1bab4eea67c655dc734d9f06ee168b20c981e711427f6a12536b1e6
- SSDEEP
  
  49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LB39w4Su+LNfej:+R0pI/IQlUoMPdmpSpv4JkNfej
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence