2650037c995170067985fdb2d53fc6da592e76201e0af08d1d44626b4824f2bd | Triage

Sharing

General

Target

2650037c995170067985fdb2d53fc6da592e76201e0af08d1d44626b4824f2bd
Size

90KB
Sample

240726-yhkb8atfmc
MD5

0a28f476335d4936951694495f12e0e9
SHA1

63da632a0cc81e3e9213a32a1d1f5f70a92fcdd9
SHA256

2650037c995170067985fdb2d53fc6da592e76201e0af08d1d44626b4824f2bd
SHA512

38d848dd3fddbd63c865bf8353492f234526b216335c07495037341ee354442780517273a8856185435b75497e08b32a4023dfe48df007a3c387a91a921fb0a9
SSDEEP

768:Qvw9816vhKQLrom4/wQRNrfrunMxVFA3b7glws:YEGh0oml2unMxVS3Hgz

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2650037c995170067985fdb2d53fc6da592e76201e0af08d1d44626b4824f2bd
- Size
  
  90KB
- MD5
  
  0a28f476335d4936951694495f12e0e9
- SHA1
  
  63da632a0cc81e3e9213a32a1d1f5f70a92fcdd9
- SHA256
  
  2650037c995170067985fdb2d53fc6da592e76201e0af08d1d44626b4824f2bd
- SHA512
  
  38d848dd3fddbd63c865bf8353492f234526b216335c07495037341ee354442780517273a8856185435b75497e08b32a4023dfe48df007a3c387a91a921fb0a9
- SSDEEP
  
  768:Qvw9816vhKQLrom4/wQRNrfrunMxVFA3b7glws:YEGh0oml2unMxVS3Hgz
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence