e2fa67990b35578ed6bcd11281a28b3581a328d38bbac12dfdba66268c3ab44f | Triage

Sharing

General

Target

e2fa67990b35578ed6bcd11281a28b3581a328d38bbac12dfdba66268c3ab44f
Size

43KB
Sample

240802-gsbdmavbmg
MD5

970428b28bd040fb81fc95a7b01cdfd2
SHA1

743817d48efafb83fb08a92d9c13d2d8bdf677be
SHA256

e2fa67990b35578ed6bcd11281a28b3581a328d38bbac12dfdba66268c3ab44f
SHA512

30307f8df915d64c28acb7bf7db320f72b3bf8c2e90adce7efe54f5d773c13e75043d15d18620569406c4401d59cee48f39bf67449d34eade3378ed91b34b64e
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhc:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY8

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  e2fa67990b35578ed6bcd11281a28b3581a328d38bbac12dfdba66268c3ab44f
- Size
  
  43KB
- MD5
  
  970428b28bd040fb81fc95a7b01cdfd2
- SHA1
  
  743817d48efafb83fb08a92d9c13d2d8bdf677be
- SHA256
  
  e2fa67990b35578ed6bcd11281a28b3581a328d38bbac12dfdba66268c3ab44f
- SHA512
  
  30307f8df915d64c28acb7bf7db320f72b3bf8c2e90adce7efe54f5d773c13e75043d15d18620569406c4401d59cee48f39bf67449d34eade3378ed91b34b64e
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhc:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY8
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence