eb37bf757a2613e6b5c0d328e9b27c64902249c510d8883593e83ff289794aa0 | Triage

Sharing

General

Target

ProtonVPN_v3.2.11.exe
Size

75.7MB
Sample

240803-ecvq8axare
MD5

550e43665d52c2788d36412981978f84
SHA1

be1157341f0fc1d16b572e869519c9adc5b52e9a
SHA256

eb37bf757a2613e6b5c0d328e9b27c64902249c510d8883593e83ff289794aa0
SHA512

09d996dc3a7ccb6c1c4c1a707bfc59a742f76542058f33ce61bf8bb0b1ae88a9bd9042f199e42de48ccd1867e9c08070920dd6f6a7542f6425c077b7320ea3ed
SSDEEP

1572864:UE8OTLnGaKm1fGChCZ713ueLEV1+ym36Z8bkFYfyxAhm+BsdDq+tl3f1umwQ:aOTSDmQlu28Ag8bkWfuA8ZtlP1TH

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  ProtonVPN_v3.2.11.exe
- Size
  
  75.7MB
- MD5
  
  550e43665d52c2788d36412981978f84
- SHA1
  
  be1157341f0fc1d16b572e869519c9adc5b52e9a
- SHA256
  
  eb37bf757a2613e6b5c0d328e9b27c64902249c510d8883593e83ff289794aa0
- SHA512
  
  09d996dc3a7ccb6c1c4c1a707bfc59a742f76542058f33ce61bf8bb0b1ae88a9bd9042f199e42de48ccd1867e9c08070920dd6f6a7542f6425c077b7320ea3ed
- SSDEEP
  
  1572864:UE8OTLnGaKm1fGChCZ713ueLEV1+ym36Z8bkFYfyxAhm+BsdDq+tl3f1umwQ:aOTSDmQlu28Ag8bkWfuA8ZtlP1TH
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence