081205ed6126e425c2e72e5d34096c3aa60c8771859f810daa79cbb1d6e90657 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50b931b9aa285d6bc836cf55dc874600N.exe
Size

98KB
Sample

240806-dzccqayapm
MD5

50b931b9aa285d6bc836cf55dc874600
SHA1

465ed9202aada51a0c3714a788d5265252a8e2d6
SHA256

081205ed6126e425c2e72e5d34096c3aa60c8771859f810daa79cbb1d6e90657
SHA512

b5188cf0311793f8ae102dd2c9cd2a9d8e5bd18a8e338ab586ed1b904f871b32f5c18dfa3dc4c408d2d4311ac63ed211479e12ea295d19e7a4c09fc6f1811d13
SSDEEP

768:5vw9816thKQLroo4/wQkNrfrunMxVFA3b7glws:lEG/0oolbunMxVS3Hgz

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  50b931b9aa285d6bc836cf55dc874600N.exe
- Size
  
  98KB
- MD5
  
  50b931b9aa285d6bc836cf55dc874600
- SHA1
  
  465ed9202aada51a0c3714a788d5265252a8e2d6
- SHA256
  
  081205ed6126e425c2e72e5d34096c3aa60c8771859f810daa79cbb1d6e90657
- SHA512
  
  b5188cf0311793f8ae102dd2c9cd2a9d8e5bd18a8e338ab586ed1b904f871b32f5c18dfa3dc4c408d2d4311ac63ed211479e12ea295d19e7a4c09fc6f1811d13
- SSDEEP
  
  768:5vw9816thKQLroo4/wQkNrfrunMxVFA3b7glws:lEG/0oolbunMxVS3Hgz
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence