5cfe80520db3c3ce239d014a3d4acb458bf14ea0fcc9d77a509b8679f3893631 | Triage

Sharing

General

Target

d30c40f6ff10ed6f30bad0aa66ab0d20N.exe
Size

43KB
Sample

240819-wn3pmssckk
MD5

d30c40f6ff10ed6f30bad0aa66ab0d20
SHA1

be224fb632b5f2648c6883bb5cbc062b213f519d
SHA256

5cfe80520db3c3ce239d014a3d4acb458bf14ea0fcc9d77a509b8679f3893631
SHA512

6eaa5f3c92f32f4d49e5a00484832615279cd95f9290e035b30e1c0523c6a1691a3a15f4199fbc47e233aed37f6c5c58e5766e8469dcc37f4d0c24525a549ff7
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhv:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYP

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  d30c40f6ff10ed6f30bad0aa66ab0d20N.exe
- Size
  
  43KB
- MD5
  
  d30c40f6ff10ed6f30bad0aa66ab0d20
- SHA1
  
  be224fb632b5f2648c6883bb5cbc062b213f519d
- SHA256
  
  5cfe80520db3c3ce239d014a3d4acb458bf14ea0fcc9d77a509b8679f3893631
- SHA512
  
  6eaa5f3c92f32f4d49e5a00484832615279cd95f9290e035b30e1c0523c6a1691a3a15f4199fbc47e233aed37f6c5c58e5766e8469dcc37f4d0c24525a549ff7
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhv:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYP
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence