b65fe17ecdda9b1f1cb0357c28e22f31a3be0eb63fa33f16e10af9dfa07be957 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6410968bd08e7438e96471abe127e80N.exe
Size

88KB
Sample

240807-nm4xba1eqh
MD5

b6410968bd08e7438e96471abe127e80
SHA1

b06c2ce1b2ca66ffae76dfae5664be94ef5d4510
SHA256

b65fe17ecdda9b1f1cb0357c28e22f31a3be0eb63fa33f16e10af9dfa07be957
SHA512

ae476680992a7e483c1e61c43af849a6f84e7c597892f3c3a2852f6fdc650d5d6722870c554dbb47b2a93c956983ef592e866dc198ed67ddcca2aad4862fd83e
SSDEEP

768:5vw9816thKQLropL4/wQkNrfrunMxVFA3V:lEG/0opLlbunMxVS3V

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b6410968bd08e7438e96471abe127e80N.exe
- Size
  
  88KB
- MD5
  
  b6410968bd08e7438e96471abe127e80
- SHA1
  
  b06c2ce1b2ca66ffae76dfae5664be94ef5d4510
- SHA256
  
  b65fe17ecdda9b1f1cb0357c28e22f31a3be0eb63fa33f16e10af9dfa07be957
- SHA512
  
  ae476680992a7e483c1e61c43af849a6f84e7c597892f3c3a2852f6fdc650d5d6722870c554dbb47b2a93c956983ef592e866dc198ed67ddcca2aad4862fd83e
- SSDEEP
  
  768:5vw9816thKQLropL4/wQkNrfrunMxVFA3V:lEG/0opLlbunMxVS3V
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence