c6cec64c56090a1b5330290616405d1a8942ebcb16265ac52acd8f029e554e6e | Triage

Sharing

General

Target

fbeee285c2c25fc8428395f2704f9cd0N.exe
Size

45KB
Sample

240819-16cndsyeke
MD5

fbeee285c2c25fc8428395f2704f9cd0
SHA1

3117d6c4d01e302f32987ad2a2b624f38f226767
SHA256

c6cec64c56090a1b5330290616405d1a8942ebcb16265ac52acd8f029e554e6e
SHA512

556470d821a0586ae1b24eee041eef7ed30954d83e3082a8d8bf87ddf1e251def3b6b9a31396b8f2434c40e1604818c4da053267589b316c8137f2f1aa3f66af
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhT:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYz

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  fbeee285c2c25fc8428395f2704f9cd0N.exe
- Size
  
  45KB
- MD5
  
  fbeee285c2c25fc8428395f2704f9cd0
- SHA1
  
  3117d6c4d01e302f32987ad2a2b624f38f226767
- SHA256
  
  c6cec64c56090a1b5330290616405d1a8942ebcb16265ac52acd8f029e554e6e
- SHA512
  
  556470d821a0586ae1b24eee041eef7ed30954d83e3082a8d8bf87ddf1e251def3b6b9a31396b8f2434c40e1604818c4da053267589b316c8137f2f1aa3f66af
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhT:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYz
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence