cc29a8a3b7737a8a9c78aad20e59f716853c38149b5c7b67a158618ea493a1a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a17a6fde80d9b590b011d8ce3798a90N.exe
Size

432KB
Sample

240803-h7l94swfrq
MD5

6a17a6fde80d9b590b011d8ce3798a90
SHA1

fcde43841e499c91eb5f8edf0efe46e89e415f80
SHA256

cc29a8a3b7737a8a9c78aad20e59f716853c38149b5c7b67a158618ea493a1a4
SHA512

50e8d6a272add78d7cf1b13739456f9c6c121f3955b295f4cd99e7d0d6fddb00f55ad4a01d4994691c507a8d5c622a267802115ed798563352677d8a0fec623a
SSDEEP

6144:4jlYKRF/LReWAsUy0Wo6tGihDiYjN7GqOrdyp25qpmFPUtvD1JaJaJJJJYRVQSnt:4jauDReWaj6tGihor04RRBt

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  6a17a6fde80d9b590b011d8ce3798a90N.exe
- Size
  
  432KB
- MD5
  
  6a17a6fde80d9b590b011d8ce3798a90
- SHA1
  
  fcde43841e499c91eb5f8edf0efe46e89e415f80
- SHA256
  
  cc29a8a3b7737a8a9c78aad20e59f716853c38149b5c7b67a158618ea493a1a4
- SHA512
  
  50e8d6a272add78d7cf1b13739456f9c6c121f3955b295f4cd99e7d0d6fddb00f55ad4a01d4994691c507a8d5c622a267802115ed798563352677d8a0fec623a
- SSDEEP
  
  6144:4jlYKRF/LReWAsUy0Wo6tGihDiYjN7GqOrdyp25qpmFPUtvD1JaJaJJJJYRVQSnt:4jauDReWaj6tGihor04RRBt
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence