d70b5da37b0ca705264654847ffbd58030356e19e2521f8b6ac0c3c673eae64d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efd36f015c0ae4344ef7ba16f2117390N.exe
Size

36KB
Sample

240818-teqbva1flb
MD5

efd36f015c0ae4344ef7ba16f2117390
SHA1

ecb343ea73208b894366b279178373c7db3cc534
SHA256

d70b5da37b0ca705264654847ffbd58030356e19e2521f8b6ac0c3c673eae64d
SHA512

f6d79381e0164ceec77b35c5c7f4769067840ee04152471a2cc80c6ced891a4a8e0e22719a48248c3c36f5825aff0c351fbacb26073806f1cf03f6abd6abc421
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6v8tvGE9UHrSdghj8bvHRIkhbUIchUh86:e6q10k0EFjed6rqJ+6v8tvGE9UHrSdg0

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  efd36f015c0ae4344ef7ba16f2117390N.exe
- Size
  
  36KB
- MD5
  
  efd36f015c0ae4344ef7ba16f2117390
- SHA1
  
  ecb343ea73208b894366b279178373c7db3cc534
- SHA256
  
  d70b5da37b0ca705264654847ffbd58030356e19e2521f8b6ac0c3c673eae64d
- SHA512
  
  f6d79381e0164ceec77b35c5c7f4769067840ee04152471a2cc80c6ced891a4a8e0e22719a48248c3c36f5825aff0c351fbacb26073806f1cf03f6abd6abc421
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6v8tvGE9UHrSdghj8bvHRIkhbUIchUh86:e6q10k0EFjed6rqJ+6v8tvGE9UHrSdg0
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence