8a26bb0dfaa21c513afc393416a8cca8a58251fac5ba5479e28ac92cec8f929f | Triage

Sharing

General

Target

0f1ee7306cefdef1bf7039123282fee0N.exe
Size

2.7MB
Sample

240819-sa8f7atglm
MD5

0f1ee7306cefdef1bf7039123282fee0
SHA1

f81548bc83f906787d7d221be268cb57bc4bc56a
SHA256

8a26bb0dfaa21c513afc393416a8cca8a58251fac5ba5479e28ac92cec8f929f
SHA512

ad9c0963e79e740dc0a87a5c8302a420814abc5a9889ff04c30cc7ce7a48b5b99db8c8ec6d956debb6dca127c0c9e5093ad1c4cde61ab8ecff3b8b617659e8ce
SSDEEP

49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBm9w4Sx:+R0pI/IQlUoMPdmpSp44

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  0f1ee7306cefdef1bf7039123282fee0N.exe
- Size
  
  2.7MB
- MD5
  
  0f1ee7306cefdef1bf7039123282fee0
- SHA1
  
  f81548bc83f906787d7d221be268cb57bc4bc56a
- SHA256
  
  8a26bb0dfaa21c513afc393416a8cca8a58251fac5ba5479e28ac92cec8f929f
- SHA512
  
  ad9c0963e79e740dc0a87a5c8302a420814abc5a9889ff04c30cc7ce7a48b5b99db8c8ec6d956debb6dca127c0c9e5093ad1c4cde61ab8ecff3b8b617659e8ce
- SSDEEP
  
  49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBm9w4Sx:+R0pI/IQlUoMPdmpSp44
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence