b8ef866ded8d3b053b5b68d768221dfea8f26bb4c3abe7b6e221f725d4a39336 | Triage

Sharing

General

Target

b8ef866ded8d3b053b5b68d768221dfea8f26bb4c3abe7b6e221f725d4a39336
Size

954KB
Sample

240818-egw5vaxaml
MD5

c001376947a8e3f456f471795e820ef4
SHA1

8678cd4e24522f33c1a891ddc72246b4469dae21
SHA256

b8ef866ded8d3b053b5b68d768221dfea8f26bb4c3abe7b6e221f725d4a39336
SHA512

4ad45126b9ffe7eef9491a33baa86a04c45d69d673cd26df6698d53420d9a3641294a96b0e42d0b386d4a92be601d4adf07ea2483b75a2aa499b4cad66209fa8
SSDEEP

12288:5wKfOVRo9yRYkI/LUh7Wk/LFHICEWLSpEgrqe:5xWVeyRYkI/8BTJ4WLG+e

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b8ef866ded8d3b053b5b68d768221dfea8f26bb4c3abe7b6e221f725d4a39336
- Size
  
  954KB
- MD5
  
  c001376947a8e3f456f471795e820ef4
- SHA1
  
  8678cd4e24522f33c1a891ddc72246b4469dae21
- SHA256
  
  b8ef866ded8d3b053b5b68d768221dfea8f26bb4c3abe7b6e221f725d4a39336
- SHA512
  
  4ad45126b9ffe7eef9491a33baa86a04c45d69d673cd26df6698d53420d9a3641294a96b0e42d0b386d4a92be601d4adf07ea2483b75a2aa499b4cad66209fa8
- SSDEEP
  
  12288:5wKfOVRo9yRYkI/LUh7Wk/LFHICEWLSpEgrqe:5xWVeyRYkI/8BTJ4WLG+e
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence