df3d22ad30c3b5a789e6a064a0c2311d88bcf33e001f9889308f13a8160a04dd | Triage

Sharing

General

Target

5dba7cd17466d25172134642ef4ea7b0N.exe
Size

140KB
Sample

240726-1wmqlszhrh
MD5

5dba7cd17466d25172134642ef4ea7b0
SHA1

eb96684eeaabd90e868db4961cbb741cc42bc5fd
SHA256

df3d22ad30c3b5a789e6a064a0c2311d88bcf33e001f9889308f13a8160a04dd
SHA512

c2b3d3a9f8b221705b21b1b16fda2984bbe794ed4dd4d98c547e35ba6ad93f60a5341320cf8023d2f57b27d639f1df7e7e6c18162893774563327910448dd0fe
SSDEEP

3072:FC+b/xEwBxygI9vj0AT1smXA3HizrYZ6oXHqBNI5xr:k+LxBxULrsr3CffoXKBy55

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  5dba7cd17466d25172134642ef4ea7b0N.exe
- Size
  
  140KB
- MD5
  
  5dba7cd17466d25172134642ef4ea7b0
- SHA1
  
  eb96684eeaabd90e868db4961cbb741cc42bc5fd
- SHA256
  
  df3d22ad30c3b5a789e6a064a0c2311d88bcf33e001f9889308f13a8160a04dd
- SHA512
  
  c2b3d3a9f8b221705b21b1b16fda2984bbe794ed4dd4d98c547e35ba6ad93f60a5341320cf8023d2f57b27d639f1df7e7e6c18162893774563327910448dd0fe
- SSDEEP
  
  3072:FC+b/xEwBxygI9vj0AT1smXA3HizrYZ6oXHqBNI5xr:k+LxBxULrsr3CffoXKBy55
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation