c20a01a6002173b0e41d59e250048fcbc22d55a3035fbaf7f854455cbc837e29 | Triage

Sharing

General

Target

c28c9ce4a874aaf20efcaf8a6bac4d40N.exe
Size

80KB
Sample

240802-w1827azcne
MD5

c28c9ce4a874aaf20efcaf8a6bac4d40
SHA1

8b622afef6d4aeffe62c9ae5200829cb3435acbb
SHA256

c20a01a6002173b0e41d59e250048fcbc22d55a3035fbaf7f854455cbc837e29
SHA512

49a1ad5526eaaba5ee7d4c26736aa36a39e7bba8c5007d50c624fdf5666dfdcb52362d635fdb4de7e0901bfdc732b73989d651d2a5bf2c9ddc65a49209b7f283
SSDEEP

384:vbLwOs8AHsc4sMfwhKQLroX4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLroX4/wQRNrfrunMxVFAi

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  c28c9ce4a874aaf20efcaf8a6bac4d40N.exe
- Size
  
  80KB
- MD5
  
  c28c9ce4a874aaf20efcaf8a6bac4d40
- SHA1
  
  8b622afef6d4aeffe62c9ae5200829cb3435acbb
- SHA256
  
  c20a01a6002173b0e41d59e250048fcbc22d55a3035fbaf7f854455cbc837e29
- SHA512
  
  49a1ad5526eaaba5ee7d4c26736aa36a39e7bba8c5007d50c624fdf5666dfdcb52362d635fdb4de7e0901bfdc732b73989d651d2a5bf2c9ddc65a49209b7f283
- SSDEEP
  
  384:vbLwOs8AHsc4sMfwhKQLroX4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLroX4/wQRNrfrunMxVFAi
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence