f18c077a39c958f927147dd7569faff0e346dcd131b094850199f14e4cc52cf2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7672f5d9d403f531e8a707859748f390N.exe
Size

37KB
Sample

240814-qmrm4avakf
MD5

7672f5d9d403f531e8a707859748f390
SHA1

5f2a4a9823108f5a51deec92c8bb41f810254656
SHA256

f18c077a39c958f927147dd7569faff0e346dcd131b094850199f14e4cc52cf2
SHA512

dab5e0c9a612b91d1a9b3d9ebeede2cc8864bdefbb371f3c36dd152628bdeee519920ba52bd3e6322b3361ff1b93377be82e2e33930127d2617b3a2968fae88c
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjUvJjWHB:e6q10k0EFjed6rqJ+6vghzwYu7vih9Gw

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  7672f5d9d403f531e8a707859748f390N.exe
- Size
  
  37KB
- MD5
  
  7672f5d9d403f531e8a707859748f390
- SHA1
  
  5f2a4a9823108f5a51deec92c8bb41f810254656
- SHA256
  
  f18c077a39c958f927147dd7569faff0e346dcd131b094850199f14e4cc52cf2
- SHA512
  
  dab5e0c9a612b91d1a9b3d9ebeede2cc8864bdefbb371f3c36dd152628bdeee519920ba52bd3e6322b3361ff1b93377be82e2e33930127d2617b3a2968fae88c
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjUvJjWHB:e6q10k0EFjed6rqJ+6vghzwYu7vih9Gw
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence