a318f2d3dcb99a921b585d916b85a6310869cacc0efe824fc15c3c254567c941 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c1a4e6835d4b07e894679cb135395c0N.exe
Size

52KB
Sample

240818-gljfnaygld
MD5

6c1a4e6835d4b07e894679cb135395c0
SHA1

36d1ecb283e3edc7f350b7847b16d76e4cc5e2fd
SHA256

a318f2d3dcb99a921b585d916b85a6310869cacc0efe824fc15c3c254567c941
SHA512

421cb30e0e29cbe84d05d8d1978b7e4595aae56d52b6b2e8a01e71c5d35f774b21e71d2e9fa22fea74861a77f2f846e7c98b14fce257702fefbebb8b416fdbdd
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIR:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVn

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  6c1a4e6835d4b07e894679cb135395c0N.exe
- Size
  
  52KB
- MD5
  
  6c1a4e6835d4b07e894679cb135395c0
- SHA1
  
  36d1ecb283e3edc7f350b7847b16d76e4cc5e2fd
- SHA256
  
  a318f2d3dcb99a921b585d916b85a6310869cacc0efe824fc15c3c254567c941
- SHA512
  
  421cb30e0e29cbe84d05d8d1978b7e4595aae56d52b6b2e8a01e71c5d35f774b21e71d2e9fa22fea74861a77f2f846e7c98b14fce257702fefbebb8b416fdbdd
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIR:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVn
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence