f7f648bccf4a1e4d3355d73fe0f1150d532cd74a0e8f78094e482850dbed372f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b443a88f3efa6b8c49b783a5c735dbe0N.exe
Size

137KB
Sample

240805-vmbdbsweqe
MD5

b443a88f3efa6b8c49b783a5c735dbe0
SHA1

10516fdaac78cce76470e01f7673765f0716d422
SHA256

f7f648bccf4a1e4d3355d73fe0f1150d532cd74a0e8f78094e482850dbed372f
SHA512

a71e950eb7a604ac49997ae9e3a64755e2730aa53c3b2733b2f24b3c8a7609080d9b47fabd6ad8674746ef7bf73dd6b71a07655a78132d8b7b7d9d8cb0fa5d57
SSDEEP

3072:9/eOrj+K1j+stAo7jpD73KvTYEIQkeJMs:FBlAQd3eCQTJF

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  b443a88f3efa6b8c49b783a5c735dbe0N.exe
- Size
  
  137KB
- MD5
  
  b443a88f3efa6b8c49b783a5c735dbe0
- SHA1
  
  10516fdaac78cce76470e01f7673765f0716d422
- SHA256
  
  f7f648bccf4a1e4d3355d73fe0f1150d532cd74a0e8f78094e482850dbed372f
- SHA512
  
  a71e950eb7a604ac49997ae9e3a64755e2730aa53c3b2733b2f24b3c8a7609080d9b47fabd6ad8674746ef7bf73dd6b71a07655a78132d8b7b7d9d8cb0fa5d57
- SSDEEP
  
  3072:9/eOrj+K1j+stAo7jpD73KvTYEIQkeJMs:FBlAQd3eCQTJF
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation