bd66452bc46d13b6e863b8a1e70ec6465421e2e412f077c43a16be222e35380f | Triage

Sharing

General

Target

29c6f0df2ff4a2047e8808f8486ba2f0N.exe
Size

128KB
Sample

240806-3hvv6stgml
MD5

29c6f0df2ff4a2047e8808f8486ba2f0
SHA1

74990c2aeb89f8e72e7a3f8004f850c07c5df03e
SHA256

bd66452bc46d13b6e863b8a1e70ec6465421e2e412f077c43a16be222e35380f
SHA512

fc4cd920204d97716bcd7910e985801214916f3ef1e984a29552e613640845c4790e6c77a33b12421d96404b988bd2d28ad79cdfd65fb163d7efc094fb930fbc
SSDEEP

3072:8VMGKIbIaw8/HthUEkm+BC3K5eqU+BC3K5eqYroI:pGKmpnhxK70K7s

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  29c6f0df2ff4a2047e8808f8486ba2f0N.exe
- Size
  
  128KB
- MD5
  
  29c6f0df2ff4a2047e8808f8486ba2f0
- SHA1
  
  74990c2aeb89f8e72e7a3f8004f850c07c5df03e
- SHA256
  
  bd66452bc46d13b6e863b8a1e70ec6465421e2e412f077c43a16be222e35380f
- SHA512
  
  fc4cd920204d97716bcd7910e985801214916f3ef1e984a29552e613640845c4790e6c77a33b12421d96404b988bd2d28ad79cdfd65fb163d7efc094fb930fbc
- SSDEEP
  
  3072:8VMGKIbIaw8/HthUEkm+BC3K5eqU+BC3K5eqYroI:pGKmpnhxK70K7s
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation