ab14494d6aed50306cdd6b13c2a10a783ec894b7b5ff18b087624b12d0eb3a01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd239ab9a7128679c38f68cf418b1210N.exe
Size

89KB
Sample

240807-parlwssanh
MD5

bd239ab9a7128679c38f68cf418b1210
SHA1

283942c24db9b37b4516b7703273dc38a981610c
SHA256

ab14494d6aed50306cdd6b13c2a10a783ec894b7b5ff18b087624b12d0eb3a01
SHA512

6a780aec630a67ca646c832441b49634fad3e1ebf73941c2ef4af67cccb892c9a1780c452d9b25b19d03d1ca7db08d36026aceb3b9cbc6e7449d3d86117c6da7
SSDEEP

768:5vw9816thKQLron4/wQkNrfrunMxVFA3k:lEG/0onlbunMxVS3k

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  bd239ab9a7128679c38f68cf418b1210N.exe
- Size
  
  89KB
- MD5
  
  bd239ab9a7128679c38f68cf418b1210
- SHA1
  
  283942c24db9b37b4516b7703273dc38a981610c
- SHA256
  
  ab14494d6aed50306cdd6b13c2a10a783ec894b7b5ff18b087624b12d0eb3a01
- SHA512
  
  6a780aec630a67ca646c832441b49634fad3e1ebf73941c2ef4af67cccb892c9a1780c452d9b25b19d03d1ca7db08d36026aceb3b9cbc6e7449d3d86117c6da7
- SSDEEP
  
  768:5vw9816thKQLron4/wQkNrfrunMxVFA3k:lEG/0onlbunMxVS3k
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence