406ed468fe77896e7571c5c704c43c36dc0141156320cce9403d5d3c3b20a1e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a11594b288bf04f561a7c48fe8e32c90N.exe
Size

35KB
Sample

240819-fchbkavcpg
MD5

a11594b288bf04f561a7c48fe8e32c90
SHA1

dac549bfce736fbecd1f2935995bd074bb7fe9ac
SHA256

406ed468fe77896e7571c5c704c43c36dc0141156320cce9403d5d3c3b20a1e5
SHA512

f6ffb22acb8e0702bef06781df03524a4ced4d0ac9476c205c8c043043b3666c2e2608121c99dca9c718ac7f0abfc303658af4e2b2fb751afd99fbebd6448ab3
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAcBHUIFvS:e6q10k0EFjed6rqJ+6vghzwYu7vih9GY

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a11594b288bf04f561a7c48fe8e32c90N.exe
- Size
  
  35KB
- MD5
  
  a11594b288bf04f561a7c48fe8e32c90
- SHA1
  
  dac549bfce736fbecd1f2935995bd074bb7fe9ac
- SHA256
  
  406ed468fe77896e7571c5c704c43c36dc0141156320cce9403d5d3c3b20a1e5
- SHA512
  
  f6ffb22acb8e0702bef06781df03524a4ced4d0ac9476c205c8c043043b3666c2e2608121c99dca9c718ac7f0abfc303658af4e2b2fb751afd99fbebd6448ab3
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAcBHUIFvS:e6q10k0EFjed6rqJ+6vghzwYu7vih9GY
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence