bab3c4ba79cf74640afbdf2b6e7e0a46872c3d5dbceb40510d61badf0d6d06df | Triage

Sharing

General

Target

bab3c4ba79cf74640afbdf2b6e7e0a46872c3d5dbceb40510d61badf0d6d06df
Size

38KB
Sample

240726-c7jw4a1fpm
MD5

a8a3d07e204bf9a5687e92e0dd1121a2
SHA1

c4986c3bffbfdd59e3a74310efc1decf72febcd5
SHA256

bab3c4ba79cf74640afbdf2b6e7e0a46872c3d5dbceb40510d61badf0d6d06df
SHA512

5f90883efcf3ea1c645edbd9e17c1c6cda3efd7fde39db55eea630244a1b84bb354e7d3feb4a5dbaf44efb1f075cf9942d3610ca6dd25000fa5033f835f0429b
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhY:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  bab3c4ba79cf74640afbdf2b6e7e0a46872c3d5dbceb40510d61badf0d6d06df
- Size
  
  38KB
- MD5
  
  a8a3d07e204bf9a5687e92e0dd1121a2
- SHA1
  
  c4986c3bffbfdd59e3a74310efc1decf72febcd5
- SHA256
  
  bab3c4ba79cf74640afbdf2b6e7e0a46872c3d5dbceb40510d61badf0d6d06df
- SHA512
  
  5f90883efcf3ea1c645edbd9e17c1c6cda3efd7fde39db55eea630244a1b84bb354e7d3feb4a5dbaf44efb1f075cf9942d3610ca6dd25000fa5033f835f0429b
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhY:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY4
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence