216b71b42c7c05fe0c2e46b8153bde7d88439667a18a18289f8f99479048a2ec | Triage

Sharing

General

Target

61b4c4bae662166a4d1c4115ce88fa20N.exe
Size

44KB
Sample

240803-g8fchszgne
MD5

61b4c4bae662166a4d1c4115ce88fa20
SHA1

1e6afd1d895cd03bdb058ee5cee5abc19c5a170c
SHA256

216b71b42c7c05fe0c2e46b8153bde7d88439667a18a18289f8f99479048a2ec
SHA512

4d95a1d126b4b5aee3fcc0ff04b6c7f520f9a3006fd9350e72e734887646ab5c3b16b7f4cd42e4dffd174461b28a5fb44227feb5459e57ce1b69a9a83582cf40
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhd:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY9

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  61b4c4bae662166a4d1c4115ce88fa20N.exe
- Size
  
  44KB
- MD5
  
  61b4c4bae662166a4d1c4115ce88fa20
- SHA1
  
  1e6afd1d895cd03bdb058ee5cee5abc19c5a170c
- SHA256
  
  216b71b42c7c05fe0c2e46b8153bde7d88439667a18a18289f8f99479048a2ec
- SHA512
  
  4d95a1d126b4b5aee3fcc0ff04b6c7f520f9a3006fd9350e72e734887646ab5c3b16b7f4cd42e4dffd174461b28a5fb44227feb5459e57ce1b69a9a83582cf40
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhd:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY9
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence