e0e905e6534ad30c6cc15628044b5a713e2887cde09fb6efb9f6d4d7043876f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a436ecc4eeb10e10549a1835fbb11130N.exe
Size

37KB
Sample

240820-s74jhathmm
MD5

a436ecc4eeb10e10549a1835fbb11130
SHA1

bd94a4ba58f11aede4b9e61f7955b2d615dbcb5b
SHA256

e0e905e6534ad30c6cc15628044b5a713e2887cde09fb6efb9f6d4d7043876f0
SHA512

10f93cacc4ad071af0592c4272a3f9fa3692dcedf14b247f14a6857542d10166196997eaca646de103bb0ec6bb167498f89579bd3148278050b99347109140c2
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6Iq:e6q10k0EFjed6rqJ+6vghzwYu7vih9GW

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a436ecc4eeb10e10549a1835fbb11130N.exe
- Size
  
  37KB
- MD5
  
  a436ecc4eeb10e10549a1835fbb11130
- SHA1
  
  bd94a4ba58f11aede4b9e61f7955b2d615dbcb5b
- SHA256
  
  e0e905e6534ad30c6cc15628044b5a713e2887cde09fb6efb9f6d4d7043876f0
- SHA512
  
  10f93cacc4ad071af0592c4272a3f9fa3692dcedf14b247f14a6857542d10166196997eaca646de103bb0ec6bb167498f89579bd3148278050b99347109140c2
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6Iq:e6q10k0EFjed6rqJ+6vghzwYu7vih9GW
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence