740972ce5b8c164fa656e4b974603fbcf5e17d3954b52f1167626627d505416c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43c916a21b04b0d00cc857c02da714a0N.exe
Size

310KB
Sample

240806-cnw3bazgpe
MD5

43c916a21b04b0d00cc857c02da714a0
SHA1

1233c5934faef09d881b784f85a544b498ccd4fd
SHA256

740972ce5b8c164fa656e4b974603fbcf5e17d3954b52f1167626627d505416c
SHA512

59514c735a7611475a72026e3a2dd26bdadd8f0c72d5b23a7af2b7bbcf97654dcf39e06b9bfd39fd9f60439dc72b8be595df5f8fcf4d83fde287160803481273
SSDEEP

3072:rvisdyVlUQLrjIK5rWefGmPPOB7ZyK1miU3Jfv5klL9Czu:r+M4wFsK0iU3J+L

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  43c916a21b04b0d00cc857c02da714a0N.exe
- Size
  
  310KB
- MD5
  
  43c916a21b04b0d00cc857c02da714a0
- SHA1
  
  1233c5934faef09d881b784f85a544b498ccd4fd
- SHA256
  
  740972ce5b8c164fa656e4b974603fbcf5e17d3954b52f1167626627d505416c
- SHA512
  
  59514c735a7611475a72026e3a2dd26bdadd8f0c72d5b23a7af2b7bbcf97654dcf39e06b9bfd39fd9f60439dc72b8be595df5f8fcf4d83fde287160803481273
- SSDEEP
  
  3072:rvisdyVlUQLrjIK5rWefGmPPOB7ZyK1miU3Jfv5klL9Czu:r+M4wFsK0iU3J+L
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation