4a56dddca821e7aa7ea94cb65ecc35363bfac8fb175b21025e6b049e533ff817 | Triage

Sharing

General

Target

97a7eb987857272b3376438762b02680N.exe
Size

91KB
Sample

240821-2pam5svbrh
MD5

97a7eb987857272b3376438762b02680
SHA1

17b6abd23f3b8a729734fe33edd0c4a4d8d32258
SHA256

4a56dddca821e7aa7ea94cb65ecc35363bfac8fb175b21025e6b049e533ff817
SHA512

e44fbb48c6599bf409244d504c300713b7e0ee6dee67e4db629c5a80e014b51b715a8b32cea2b4c11cf7954a206fafee2942ddd13645fe8aa60f0d6db799f39b
SSDEEP

768:5vw9816uhKirowC4/wQNNrfrunMxVFA3b7t:lEGkmonlCunMxVS3Ht

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  97a7eb987857272b3376438762b02680N.exe
- Size
  
  91KB
- MD5
  
  97a7eb987857272b3376438762b02680
- SHA1
  
  17b6abd23f3b8a729734fe33edd0c4a4d8d32258
- SHA256
  
  4a56dddca821e7aa7ea94cb65ecc35363bfac8fb175b21025e6b049e533ff817
- SHA512
  
  e44fbb48c6599bf409244d504c300713b7e0ee6dee67e4db629c5a80e014b51b715a8b32cea2b4c11cf7954a206fafee2942ddd13645fe8aa60f0d6db799f39b
- SSDEEP
  
  768:5vw9816uhKirowC4/wQNNrfrunMxVFA3b7t:lEGkmonlCunMxVS3Ht
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence