ae9e4974652dc907c017d94d511f1c4cbab72b8c440c052f38acac86279eb509 | Triage

Sharing

General

Target

pivot_v5-2.exe
Size

660KB
Sample

240809-zecnmssaqa
MD5

f577fc68521d8ca399edd72ac913255d
SHA1

8ff05351f4d8f3c4c80ed4985590e8ab1b989ea1
SHA256

ae9e4974652dc907c017d94d511f1c4cbab72b8c440c052f38acac86279eb509
SHA512

ce2497db91582a1d21093e1e08fd33bb91d7f93081045e716cc46c2b4b24f65ec4dbe8ce7149109c4a713b55a13706cfda967fdbd466d3c1c00024f4761f0e38
SSDEEP

12288:zymCv84Lnka4eec2ZZEhl3qgi4JpXBLUbBinP7:zIv84Lnk5LEhl3qZs1P7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  pivot_v5-2.exe
- Size
  
  660KB
- MD5
  
  f577fc68521d8ca399edd72ac913255d
- SHA1
  
  8ff05351f4d8f3c4c80ed4985590e8ab1b989ea1
- SHA256
  
  ae9e4974652dc907c017d94d511f1c4cbab72b8c440c052f38acac86279eb509
- SHA512
  
  ce2497db91582a1d21093e1e08fd33bb91d7f93081045e716cc46c2b4b24f65ec4dbe8ce7149109c4a713b55a13706cfda967fdbd466d3c1c00024f4761f0e38
- SSDEEP
  
  12288:zymCv84Lnka4eec2ZZEhl3qgi4JpXBLUbBinP7:zIv84Lnk5LEhl3qZs1P7
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

Software Discovery

Security Software Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2