5ccb73d28f20444096d07f01da7dc43fbc08469b0a75c6edca793293d65bd3d2 | Triage

Sharing

General

Target

5ccb73d28f20444096d07f01da7dc43fbc08469b0a75c6edca793293d65bd3d2
Size

2.7MB
Sample

240817-2rn9bavaln
MD5

b63b8a778bf6d9c311b3c0c171a5867f
SHA1

741363ee8214d61ae3fb9d52c545c395ed4ff4c2
SHA256

5ccb73d28f20444096d07f01da7dc43fbc08469b0a75c6edca793293d65bd3d2
SHA512

42a74fcc35ec5a36ebb4abed007ee393ba51d395be122b197fabd151d38e25ac387367b7ae22ee61f95994a8810023a0c31a08d7084c6275dcc9e70f8d6dd8f6
SSDEEP

49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBL9w4Sx:+R0pI/IQlUoMPdmpSpX4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  5ccb73d28f20444096d07f01da7dc43fbc08469b0a75c6edca793293d65bd3d2
- Size
  
  2.7MB
- MD5
  
  b63b8a778bf6d9c311b3c0c171a5867f
- SHA1
  
  741363ee8214d61ae3fb9d52c545c395ed4ff4c2
- SHA256
  
  5ccb73d28f20444096d07f01da7dc43fbc08469b0a75c6edca793293d65bd3d2
- SHA512
  
  42a74fcc35ec5a36ebb4abed007ee393ba51d395be122b197fabd151d38e25ac387367b7ae22ee61f95994a8810023a0c31a08d7084c6275dcc9e70f8d6dd8f6
- SSDEEP
  
  49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBL9w4Sx:+R0pI/IQlUoMPdmpSpX4
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence