60e0cdebe6b4b44c4e3f123f891b79551c6e21d84e98c3e80f274ffa789607a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b94c32cea01bef8272421188794340b0N.exe
Size

518KB
Sample

240820-kfyvyascnb
MD5

b94c32cea01bef8272421188794340b0
SHA1

1664084741f19aece5815d16f26e8c69784b43a5
SHA256

60e0cdebe6b4b44c4e3f123f891b79551c6e21d84e98c3e80f274ffa789607a2
SHA512

7f7046c3108b330ffd6b547b5ff116240ce8320246b5d185b90d2b4f5c8f280570a02582426474d3151f1dc3072490b5e8cd7e1c2d0994916d830e3366944d55
SSDEEP

12288:ntKe6Zv23YemcR1bbLmRNO8zyrTDawU7yDKH+OSlQ0NY+JR8mG:76Zv2lmCrE+GwMyDKeOSPW+k

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b94c32cea01bef8272421188794340b0N.exe
- Size
  
  518KB
- MD5
  
  b94c32cea01bef8272421188794340b0
- SHA1
  
  1664084741f19aece5815d16f26e8c69784b43a5
- SHA256
  
  60e0cdebe6b4b44c4e3f123f891b79551c6e21d84e98c3e80f274ffa789607a2
- SHA512
  
  7f7046c3108b330ffd6b547b5ff116240ce8320246b5d185b90d2b4f5c8f280570a02582426474d3151f1dc3072490b5e8cd7e1c2d0994916d830e3366944d55
- SSDEEP
  
  12288:ntKe6Zv23YemcR1bbLmRNO8zyrTDawU7yDKH+OSlQ0NY+JR8mG:76Zv2lmCrE+GwMyDKeOSPW+k
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence