9fea5d979634e4d66db6512dc724cecd2279af23772a0b26b7e87a32afac686b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca87eaeeea53f3cd1130d2885f136650N.exe
Size

118KB
Sample

240806-tb8zsatanq
MD5

ca87eaeeea53f3cd1130d2885f136650
SHA1

d27a74b640390fc5776d1685d4d8aa4a16289257
SHA256

9fea5d979634e4d66db6512dc724cecd2279af23772a0b26b7e87a32afac686b
SHA512

d774615f2d10a2fb0cdc8a7c1330a02fd31a0c3200f43e06ad3e20d13cc46d963952dcd23d498534a1e983d350a3155d76038c0e27eb0c4ea65ea631906fe183
SSDEEP

768:FPy56wTz/A780mpqiHZplRRqpd6rnxn7A4xifivsWdvbh7iMTh:F6RAo0Yj2d6rnJk4IUFdvbh7iMTh

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ca87eaeeea53f3cd1130d2885f136650N.exe
- Size
  
  118KB
- MD5
  
  ca87eaeeea53f3cd1130d2885f136650
- SHA1
  
  d27a74b640390fc5776d1685d4d8aa4a16289257
- SHA256
  
  9fea5d979634e4d66db6512dc724cecd2279af23772a0b26b7e87a32afac686b
- SHA512
  
  d774615f2d10a2fb0cdc8a7c1330a02fd31a0c3200f43e06ad3e20d13cc46d963952dcd23d498534a1e983d350a3155d76038c0e27eb0c4ea65ea631906fe183
- SSDEEP
  
  768:FPy56wTz/A780mpqiHZplRRqpd6rnxn7A4xifivsWdvbh7iMTh:F6RAo0Yj2d6rnJk4IUFdvbh7iMTh
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence