2f1c170805f4cff1e17c6df366ecb73897f3064733d72dde24e688935c0d6313 | Triage

Sharing

General

Target

19b23a45c94e919648b8a24d9b05a590N.exe
Size

38KB
Sample

240726-rjepsswemb
MD5

19b23a45c94e919648b8a24d9b05a590
SHA1

251254472e806576e4d3a8735d3e9fada88aba09
SHA256

2f1c170805f4cff1e17c6df366ecb73897f3064733d72dde24e688935c0d6313
SHA512

4fa81fa28576a544811925cf474dc17a95b3d4491bba6674b84fa383dacefab32feece39aca3b0db135de691fe16b1af19ea926bf4830f577a9faf3f5f870d95
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhR:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYx

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  19b23a45c94e919648b8a24d9b05a590N.exe
- Size
  
  38KB
- MD5
  
  19b23a45c94e919648b8a24d9b05a590
- SHA1
  
  251254472e806576e4d3a8735d3e9fada88aba09
- SHA256
  
  2f1c170805f4cff1e17c6df366ecb73897f3064733d72dde24e688935c0d6313
- SHA512
  
  4fa81fa28576a544811925cf474dc17a95b3d4491bba6674b84fa383dacefab32feece39aca3b0db135de691fe16b1af19ea926bf4830f577a9faf3f5f870d95
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhR:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYx
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence