e81047307fd9a53d634afdbcf73486b6ff9338569e31b1a8335cbc563d533405 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e81047307fd9a53d634afdbcf73486b6ff9338569e31b1a8335cbc563d533405
Size

73KB
Sample

240803-e21nrsxhnc
MD5

848fcd7cdf45aef94ca099a8f6c54267
SHA1

46b5688d05a0909ddc4934964f91471dad7969c8
SHA256

e81047307fd9a53d634afdbcf73486b6ff9338569e31b1a8335cbc563d533405
SHA512

a599039dd047cac09219b80fc312761374eb8ed33fd4eeab28aa71e72ec8cc9a5b933aeb9c85ad7a7b47cd07b681763af1801c983a2eacf5ecd33dbb92946399
SSDEEP

1536:86RAo0ej2d6rnJwwvlNlIUBvsI7hrhEh9cpDN/qhAvP3OInvnHvvxIfhqhcGoI/w:xAo1lOwvlNlXBvsI7hrhEh9cpDN/qhAw

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  e81047307fd9a53d634afdbcf73486b6ff9338569e31b1a8335cbc563d533405
- Size
  
  73KB
- MD5
  
  848fcd7cdf45aef94ca099a8f6c54267
- SHA1
  
  46b5688d05a0909ddc4934964f91471dad7969c8
- SHA256
  
  e81047307fd9a53d634afdbcf73486b6ff9338569e31b1a8335cbc563d533405
- SHA512
  
  a599039dd047cac09219b80fc312761374eb8ed33fd4eeab28aa71e72ec8cc9a5b933aeb9c85ad7a7b47cd07b681763af1801c983a2eacf5ecd33dbb92946399
- SSDEEP
  
  1536:86RAo0ej2d6rnJwwvlNlIUBvsI7hrhEh9cpDN/qhAvP3OInvnHvvxIfhqhcGoI/w:xAo1lOwvlNlXBvsI7hrhEh9cpDN/qhAw
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence