5ffd8acf6de52083ff5e8d961e3e40bb0c39c23c5b3bc7227460470cf8963151 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

562bdc639914ff7b7b4558819a1230d0N.exe
Size

397KB
Sample

240817-a5g9da1amp
MD5

562bdc639914ff7b7b4558819a1230d0
SHA1

80a1156c3fe1300c6ef0faea539c59632c1887cb
SHA256

5ffd8acf6de52083ff5e8d961e3e40bb0c39c23c5b3bc7227460470cf8963151
SHA512

b04fe3e280476de5def50f35e1f3c09e2a7599052f2644c6ed3949b67b91c46b6a49e47990ed9c942592c1a975b1c2744858041c5f62c2852958f420e416227a
SSDEEP

6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/bDE:Os52hzpHq8eTi30yIQrDDE

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  562bdc639914ff7b7b4558819a1230d0N.exe
- Size
  
  397KB
- MD5
  
  562bdc639914ff7b7b4558819a1230d0
- SHA1
  
  80a1156c3fe1300c6ef0faea539c59632c1887cb
- SHA256
  
  5ffd8acf6de52083ff5e8d961e3e40bb0c39c23c5b3bc7227460470cf8963151
- SHA512
  
  b04fe3e280476de5def50f35e1f3c09e2a7599052f2644c6ed3949b67b91c46b6a49e47990ed9c942592c1a975b1c2744858041c5f62c2852958f420e416227a
- SSDEEP
  
  6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/bDE:Os52hzpHq8eTi30yIQrDDE
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence