666fdb01170c20ba8bf30acfeb53a949f2c66bf02dce15d95f5426d053b187af | Triage

Sharing

General

Target

6fa03a7b41cce8f43089f6d8e85cb9a0N.exe
Size

44KB
Sample

240817-jl44gavdje
MD5

6fa03a7b41cce8f43089f6d8e85cb9a0
SHA1

ccd08d959c00c6cb6412482450f56b7eb40f7978
SHA256

666fdb01170c20ba8bf30acfeb53a949f2c66bf02dce15d95f5426d053b187af
SHA512

b587edf452437670eacba4d75e14fa339b8cd328219e4db19305ba87ebc736f0e16c5cfa41cb092f14209775f0a9367b18894887f1db1e013e7ccacb786255bc
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNho:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYI

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  6fa03a7b41cce8f43089f6d8e85cb9a0N.exe
- Size
  
  44KB
- MD5
  
  6fa03a7b41cce8f43089f6d8e85cb9a0
- SHA1
  
  ccd08d959c00c6cb6412482450f56b7eb40f7978
- SHA256
  
  666fdb01170c20ba8bf30acfeb53a949f2c66bf02dce15d95f5426d053b187af
- SHA512
  
  b587edf452437670eacba4d75e14fa339b8cd328219e4db19305ba87ebc736f0e16c5cfa41cb092f14209775f0a9367b18894887f1db1e013e7ccacb786255bc
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNho:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYI
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence