389beb59ab9faa6db18a2434e3645775da0104e9456af6abd3e2d0e94899e632 | Triage

Sharing

General

Target

055cb0295fc2043b82740dda30c11b40N.exe
Size

39KB
Sample

240816-26wa6stamb
MD5

055cb0295fc2043b82740dda30c11b40
SHA1

0322bd19b6c88f4f25eb743e1485ea37167a7c02
SHA256

389beb59ab9faa6db18a2434e3645775da0104e9456af6abd3e2d0e94899e632
SHA512

1b48d2368de61423e02b3e63be16fec5f70dcb5ac10e38791de199bc54108b87ae85f963080ec4fdfe2f9aaba68801c7a80b464858e5e1a0d1c7340b397f9ebd
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNh5:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYZ

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  055cb0295fc2043b82740dda30c11b40N.exe
- Size
  
  39KB
- MD5
  
  055cb0295fc2043b82740dda30c11b40
- SHA1
  
  0322bd19b6c88f4f25eb743e1485ea37167a7c02
- SHA256
  
  389beb59ab9faa6db18a2434e3645775da0104e9456af6abd3e2d0e94899e632
- SHA512
  
  1b48d2368de61423e02b3e63be16fec5f70dcb5ac10e38791de199bc54108b87ae85f963080ec4fdfe2f9aaba68801c7a80b464858e5e1a0d1c7340b397f9ebd
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNh5:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYZ
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence