811dafb0027d01e8127474ab2eabf45c32637a29d3de5244a73d8637f85a7e8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

811dafb0027d01e8127474ab2eabf45c32637a29d3de5244a73d8637f85a7e8b
Size

193KB
Sample

240808-acbk5awfnr
MD5

e8a4cc83b189e427d039745efc4612fc
SHA1

61c2da29e133e67c71778d323248f347114a28f6
SHA256

811dafb0027d01e8127474ab2eabf45c32637a29d3de5244a73d8637f85a7e8b
SHA512

6f9613be3fd2789fa2a987b7f1d846987224aa3457e5a747db8378dca876ef3afde3d72786cda622c54d7c371c90ade5b9a3ae73767ad456ae672dbc84bd8ace
SSDEEP

6144:25XdiBQamZSxdvQFYePmI2rLGdqVrm6mybi2BM:25Xd8bmZ+EYCELSx6xiUM

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  811dafb0027d01e8127474ab2eabf45c32637a29d3de5244a73d8637f85a7e8b
- Size
  
  193KB
- MD5
  
  e8a4cc83b189e427d039745efc4612fc
- SHA1
  
  61c2da29e133e67c71778d323248f347114a28f6
- SHA256
  
  811dafb0027d01e8127474ab2eabf45c32637a29d3de5244a73d8637f85a7e8b
- SHA512
  
  6f9613be3fd2789fa2a987b7f1d846987224aa3457e5a747db8378dca876ef3afde3d72786cda622c54d7c371c90ade5b9a3ae73767ad456ae672dbc84bd8ace
- SSDEEP
  
  6144:25XdiBQamZSxdvQFYePmI2rLGdqVrm6mybi2BM:25Xd8bmZ+EYCELSx6xiUM
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation