3565b014c12d09c40d76690741baf605bf38f78a1f65b8525a1b0957a3de8224 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e46bc1644a3d3db951cab1c002e6070N.exe
Size

2.7MB
Sample

240819-r8smystfjm
MD5

0e46bc1644a3d3db951cab1c002e6070
SHA1

b6d67cd9197fc7fc572239264afd5384f7d78b55
SHA256

3565b014c12d09c40d76690741baf605bf38f78a1f65b8525a1b0957a3de8224
SHA512

68668590849843c867fb049ce20930d5684011b02074015fe7387857620d1cc5ed7c7f4d45be917853fb7edeb6aaa86c952861ce2186d43514105436e146d54d
SSDEEP

49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBU9w4Sx:+R0pI/IQlUoMPdmpSpO4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  0e46bc1644a3d3db951cab1c002e6070N.exe
- Size
  
  2.7MB
- MD5
  
  0e46bc1644a3d3db951cab1c002e6070
- SHA1
  
  b6d67cd9197fc7fc572239264afd5384f7d78b55
- SHA256
  
  3565b014c12d09c40d76690741baf605bf38f78a1f65b8525a1b0957a3de8224
- SHA512
  
  68668590849843c867fb049ce20930d5684011b02074015fe7387857620d1cc5ed7c7f4d45be917853fb7edeb6aaa86c952861ce2186d43514105436e146d54d
- SSDEEP
  
  49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBU9w4Sx:+R0pI/IQlUoMPdmpSpO4
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence